Lucene search
Lana CodesWPEX-ID:82F543E3-9397-4364-9546-AF5EA134FCD4HistoryJan 06, 2023 - 12:00 a.m.
WP Social Widget < 2.2.4 - Contributor+ Stored XSS
2023-01-0600:00:00
Lana Codes
63
wordpress social widget
stored xss
contributor
exploit
0.001 Low
EPSS
Percentile
23.4%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
[wpsw facebook='" onmouseover="alert(1)"' background_color='red']Related
nvd
nvd
CVE-2023-0074
2023-01-30 21:15:13
cvelist
cvelist
CVE-2023-0074 WP Social Widget < 2.2.4 - Contributor+ Stored XSS
2023-01-30 20:31:45
wpvulndb
wpvulndb
WP Social Widget < 2.2.4 - Contributor+ Stored XSS
2023-01-06 00:00:00
prion
prion
Cross site scripting
2023-01-30 21:15:00
cve
cve
CVE-2023-0074
2023-01-30 21:15:13