CVE-2022-4653

creationtimestamp| type| source ---|---|--- 2023-01-16 18:24:06+00:00| seen| https://t.me/cibsecurity/56538...

CVE-2022-4653

Greenshift WordPress plugin prior to 4.8.9 is affected: it fails to validate/escape a shortcode attribute, allowing stored XSS by users with as low as contributor. Impact is stored XSS; PoC demonstrates injection via a shortcode. Remediation: update to version 4.8.9 or later. (CVE-2022-4653)

CVE-2022-4653 Greenshift – animation and page builder blocks < 4.8.9 - Contributor+ Stored XSS via Shortcode

The Greenshift WordPress plugin before 4.8.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

CVE-2022-4653 Greenshift – animation and page builder blocks < 4.8.9 - Contributor+ Stored XSS via Shortcode

The Greenshift WordPress plugin before 4.8.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...