Lucene search
WPScanVULNRICHMENT:CVE-2023-4799HistoryNov 20, 2023 - 6:55 p.m.
CVE-2023-4799 Magic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcode
2023-11-2018:55:04
WPScan
github.com
1
cve-2023-4799
wordpress
plugin
validation
stored xss
The Magic Embeds WordPress plugin before 3.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Related
nvd
nvd
CVE-2023-4799
2023-11-20 19:15:09
cve
cve
CVE-2023-4799
2023-11-20 19:15:09
cvelist
cvelist
CVE-2023-4799 Magic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcode
2023-11-20 18:55:04
wpexploit
wpexploit
Magic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcode
2023-10-27 00:00:00
wpvulndb
wpvulndb
Magic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcode
2023-10-27 00:00:00
prion
prion
Cross site scripting
2023-11-20 19:15:00
wordfence
wordfence
AI Score
6
Confidence
High
SSVC
Exploitation
poc
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-4799