Lucene search
+L

26 matches found

CNNVD
CNNVD
added 2023/07/31 12:0 a.m.7 views

WordPress plugin Short URL 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

4.8CVSS6.1AI score0.00501EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2023/07/31 12:0 a.m.8 views

PT-2023-23286 · WordPress · Short Url

Name of the Vulnerable Software and Affected Versions: Short URL WordPress plugin versions prior to 1.6.5 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example, in a...

4.8CVSS5.2AI score0.00501EPSS
SaveExploits2References4
Patchstack
Patchstack
added 2023/07/12 12:0 a.m.15 views

WordPress Short URL Plugin < 1.6.5 is vulnerable to Cross Site Scripting (XSS)

Software Short URL Type Plugin Vulnerable versions 1.6.5 Fixed in 1.6.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3130 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9ca4df5fae13 Credits Bob Matyas Required privilege...

4.8CVSS5.7AI score0.00501EPSS
SaveExploits2References4Affected Software1
Prion
Prion
added 2023/06/29 2:15 a.m.11 views

Cross site scripting

The Short URL plugin for WordPress is vulnerable to stored Cross-Site Scripting via the 'comment' parameter due to insufficient input sanitization and output escaping in versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with administrator-level permissions...

4.3CVSS4.7AI score0.00405EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/29 1:56 a.m.15 views

CVE-2023-1602

The Short URL plugin for WordPress is vulnerable to stored Cross-Site Scripting via the 'comment' parameter due to insufficient input sanitization and output escaping in versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with administrator-level permissions...

4.4CVSS5.8AI score0.00405EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/06/28 12:0 a.m.17 views

WordPress Short URL Plugin <= 1.6.4 is vulnerable to Cross Site Scripting (XSS)

Software Short URL Type Plugin Vulnerable versions = 1.6.4 Fixed in 1.6.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1602 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 52582bfc5da0 Credits Etan Imanol Castro Aldrete...

4.8CVSS5.7AI score0.00405EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder