Lucene search
PRIOn knowledge basePRION:CVE-2023-6278HistoryJan 29, 2024 - 3:15 p.m.
Cross site scripting
2024-01-2915:15:00
PRIOn knowledge base
www.prio-n.com
3
biteship
wordpress
reflected cross-site scripting
high privilege users
The Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo WordPress plugin before 2.2.25 does not sanitise and escape the biteship_error and biteship_message parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Related
cve
cve
CVE-2023-6278
2024-01-29 15:15:09
wpexploit
wpexploit
Biteship for WooCommerce < 2.2.25 - Reflected Cross-Site Scripting
2024-01-03 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2023-6278
2024-01-29 15:15:09
wpvulndb
wpvulndb
Biteship for WooCommerce < 2.2.25 - Reflected Cross-Site Scripting
2024-01-03 00:00:00