Lucene search
Dmitrii IgnatyevWPEX-ID:8E63BF7C-7827-4C4D-B0E3-66354B218BEEHistoryJan 03, 2024 - 12:00 a.m.
TJ Shortcodes <= 0.1.3 - Contributor+ Stored XSS via Shortcodes
2024-01-0300:00:00
Dmitrii Ignatyev
56
tj shortcodes stored xss contributor+ target
Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
[junkie-button url="http://example.com" style="grey" size="small" type="round" target='" onmouseover="alert(/XSS/)"'] Button Text[/junkie-button]Related
prion
prion
Cross site scripting
2024-01-29 15:15:00
cvelist
cvelist
wpvulndb
wpvulndb
TJ Shortcodes <= 0.1.3 - Contributor+ Stored XSS via Shortcodes
2024-01-03 00:00:00
cve
cve
CVE-2023-6530
2024-01-29 15:15:09
CVE-2023-5619
2024-01-04 20:15:25
nvd
nvd
CVE-2023-6530
2024-01-29 15:15:09
CVE-2023-5619
2024-01-04 20:15:25
wordfence
wordfence
AI Score
8.3
Confidence
High
EPSS
0
Percentile
14.0%
Related for WPEX-ID:8E63BF7C-7827-4C4D-B0E3-66354B218BEE