Lucene search

PRIOn knowledge basePRION:CVE-2024-23502

HistoryJan 31, 2024 - 4:15 p.m.

Cross site scripting

2024-01-3116:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

web page generation

input neutralization

infornweb

posts list designer

list category posts

recent posts

stored xss

nvd

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in InfornWeb Posts List Designer by Category – List Category Posts Or Recent Posts allows Stored XSS.This issue affects Posts List Designer by Category – List Category Posts Or Recent Posts: from n/a through 3.3.2.

CPENameOperatorVersion
posts_list_designer_by_categoryle3.3.2

CPE	Name	Operator	Version
	posts_list_designer_by_category	le	3.3.2

References

patchstack.com/database/vulnerability/post-list-designer/wordpress-posts-list-designer-by-category-plugin-3-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve