Lucene search
Lana CodesWPEX-ID:8281FCE2-6F24-4D3F-895F-4D8694806609HistoryMay 12, 2023 - 12:00 a.m.
WP Multi Store Locator <= 2.5 - Contributor+ Stored XSS
2023-05-1200:00:00
Lana Codes
49
wordpress
multi store locator
contributor
stored xss
security threat
0.001 Low
EPSS
Percentile
23.6%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
[store_locator_show location="'); alert(1); wpmsl_update_map('"]Related
nvd
nvd
CVE-2023-0152
2023-06-05 14:15:09
cvelist
cvelist
CVE-2023-0152 WP Multi Store Locator <= 2.4 - Contributor+ Stored XSS
2023-06-05 13:39:00
cve
cve
CVE-2023-0152
2023-06-05 14:15:09
wpvulndb
wpvulndb
WP Multi Store Locator <= 2.5 - Contributor+ Stored XSS
2023-05-12 00:00:00
prion
prion
Cross site scripting
2023-06-05 14:15:00
wordfence
wordfence