Lucene search

K
wpexploitLana CodesWPEX-ID:238842EE-6392-4EB2-96CB-08E4ECE6FCA1
HistoryMay 26, 2023 - 12:00 a.m.

SlideOnline <= 1.2.1 - Contributor+ Stored XSS

2023-05-2600:00:00
Lana Codes
74
slideonline
contributor+
poc
remediated
exploit

EPSS

0.001

Percentile

25.3%

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

The PoC will be displayed once the issue has been remediated

EPSS

0.001

Percentile

25.3%

Related for WPEX-ID:238842EE-6392-4EB2-96CB-08E4ECE6FCA1