Cross site scripting

2024-01-1516:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

estatik real estate plugin

wordpress

reflected

high privilege users

6.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin