Lucene search
PRIOn knowledge basePRION:CVE-2023-6081HistoryFeb 12, 2024 - 4:15 p.m.
Cross site scripting
2024-02-1216:15:00
PRIOn knowledge base
www.prio-n.com
4
chartjs
wordpress
vulnerability
stored cross-site scripting
high privilege users
admin
settings
sanitise
escape
unfiltered_html
capability
multisite setup
nvd
The chartjs WordPress plugin through 2023.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Related
wpexploit
wpexploit
cvelist
cvelist
wpvulndb
wpvulndb
cve
cve
CVE-2023-6081
2024-02-12 16:15:08
wordfence
wordfence