Lucene search
Lana CodesWPEX-ID:92F43DA9-9903-4BCF-99E8-0E269072D389HistoryJan 24, 2023 - 12:00 a.m.
Timed Content < 2.73 - Contributor+ Stored XSS
2023-01-2400:00:00
Lana Codes
150
timed content
stored xss
contributor+
EPSS
0.001
Percentile
25.5%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
[timed-content-client hide="10:00:' onmouseover='alert(1)'"]XSS[/timed-content-client]
Related
prion
prion
Cross site scripting
2023-02-21 09:15:00
cvelist
cvelist
CVE-2023-0067 Timed Content < 2.73 - Contributor+ Stored XSS
2023-02-21 08:50:41
nvd
nvd
CVE-2023-0067
2023-02-21 09:15:11
wpvulndb
wpvulndb
Timed Content < 2.73 - Contributor+ Stored XSS
2023-01-24 00:00:00
cve
cve
CVE-2023-0067
2023-02-21 09:15:11