Lucene search
Lana CodesWPEX-ID:AF9CBB4A-42FC-43C5-88F3-349B417F1A6AHistoryJan 11, 2023 - 12:00 a.m.
Flexible Captcha <= 4.1 - Contributor+ Stored XSS
2023-01-1100:00:00
Lana Codes
56
flexible captcha contributor stored xss security exploit
0.001 Low
EPSS
Percentile
23.5%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
[FC_captcha_fields width='" onmouseover="alert(1)" style="background:red;width:100px;height:100px;"']Related
prion
prion
Cross site scripting
2023-02-06 20:15:00
cvelist
cvelist
CVE-2023-0147 Flexible Captcha <= 4.1 - Contributor+ Stored XSS
2023-02-06 19:59:41
cve
cve
CVE-2023-0147
2023-02-06 20:15:13
nvd
nvd
CVE-2023-0147
2023-02-06 20:15:13
wpvulndb
wpvulndb
Flexible Captcha <= 4.1 - Contributor+ Stored XSS
2023-01-11 00:00:00