Lucene search
Maurice FielenbachWPEX-ID:55B28FA6-A54F-4365-9D59-F9E331C1E11BHistoryApr 10, 2023 - 12:00 a.m.
Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS
2023-04-1000:00:00
Maurice Fielenbach
77
pixelyoursite
catalog feed
reflected xss
admin
url exploit
EPSS
0.001
Percentile
31.0%
The plugin does not sanitise and escape the edit parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administrators.
Make a logged in admin open the following URL: https://example.com/wp-admin/admin.php?page=wpwoof-settings&edit="><script>alert(/XSS/)</script>Related
wpvulndb
wpvulndb
Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS
2023-04-10 00:00:00
prion
prion
Cross site scripting
2023-05-02 08:15:00
cvelist
cvelist
CVE-2023-1804 Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS
2023-05-02 07:04:56
cve
cve
CVE-2023-1804
2023-05-02 08:15:10
nvd
nvd
CVE-2023-1804
2023-05-02 08:15:10
wordfence
wordfence