Lucene search
Lana CodesWPEX-ID:3F2565CD-7050-4EBD-9A50-CD9B9F7C3341HistoryMar 01, 2023 - 12:00 a.m.
menu shortcode <= 1.0 - Contributor+ Stored XSS via Shortcode
2023-03-0100:00:00
Lana Codes
48
stored xss
shortcode
contributor+
safari
exploit
0.001 Low
EPSS
Percentile
23.5%
The plugin does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Exploit shortcode: [redirect duration="1" location="javascript:alert(1)"]
Note: The exploit works on older Safari browsers.Related
cve
cve
CVE-2023-0395
2023-03-27 16:15:08
cvelist
cvelist
CVE-2023-0395 menu shortcode <= 1.0 - Contributor+ Stored XSS via Shortcode
2023-03-27 15:37:46
nvd
nvd
CVE-2023-0395
2023-03-27 16:15:08
wpvulndb
wpvulndb
menu shortcode <= 1.0 - Contributor+ Stored XSS via Shortcode
2023-03-01 00:00:00
prion
prion
Cross site scripting
2023-03-27 16:15:00
wordfence
wordfence