Lucene search
Enrico Marcolini, Claudio MarchesiniWPEX-ID:AA868380-CDA7-4EC6-8A3F-D9FA692908F2HistoryOct 09, 2023 - 12:00 a.m.
Fattura24 < 6.2.8 - Reflected Cross-Site Scripting
2023-10-0900:00:00
Enrico Marcolini, Claudio Marchesini
54
fattura24
cross-site scripting
vulnerability
wp-admin
EPSS
0.001
Percentile
17.0%
Description The plugin does not sanitize or escape the ‘id’ parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting vulnerability.
wp-admin/options-general.php?page=fatt-24-tax&id=12<script>alert(1)%3B<%2Fscript>Related
cvelist
cvelist
CVE-2023-5211 Fattura24 < 6.2.8 - Reflected Cross-Site Scripting
2023-10-31 13:54:45
prion
prion
Cross site scripting
2023-10-31 14:15:00
cve
cve
CVE-2023-5211
2023-10-31 14:15:12
wpvulndb
wpvulndb
Fattura24 < 6.2.8 - Reflected Cross-Site Scripting
2023-10-09 00:00:00
nvd
nvd
CVE-2023-5211
2023-10-31 14:15:12
wordfence
wordfence