Lucene search
WpvulndbWPEX-ID:6E222018-A3E0-4AF0-846C-6F00B67DFBC0HistoryMay 11, 2023 - 12:00 a.m.
Frontend Post WordPress Plugin <= 2.8.4 - Contributor+ Arbitrary Redirect
2023-05-1100:00:00
wpvulndb
48
wordpress
plugin
security
exploit
redirect
0.001 Low
EPSS
Percentile
23.6%
The plugin does not validate an attribute of one of its shortcode, which could allow users with a role as low as contributor to add a malicious shortcode to a page/post, which will redirect users to an arbitrary domain.
[ap-form-message redirect="https://wpscan.com"]Related
cve
cve
CVE-2022-4946
2023-06-05 14:15:09
prion
prion
Code injection
2023-06-05 14:15:00
nvd
nvd
CVE-2022-4946
2023-06-05 14:15:09
wpvulndb
wpvulndb
Frontend Post WordPress Plugin <= 2.8.4 - Contributor+ Arbitrary Redirect
2023-05-11 00:00:00
cvelist
cvelist
wordfence
wordfence