PT-2023-19223 · Unknown · Moris Dov Stock Market Charts From Finviz

Name of the Vulnerable Software and Affected Versions: Moris Dov Stock market charts from finviz plugin versions = 1.0.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Moris Dov Stock...

Stock market charts from finviz <= 1.0.1 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...