Lucene search
Lana CodesWPEX-ID:B28150E7-214B-4BCD-85C0-E819C4223484HistoryJan 13, 2023 - 12:00 a.m.
Happyforms < 1.22.0 - Contributor+ Stored XSS
2023-01-1300:00:00
Lana Codes
56
happyforms
contributor+
stored xss
exploit
additional css
forms
gutenberg block
onmouseover
alert
background
0.001 Low
EPSS
Percentile
23.4%
The plugin does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Exploit Additional CSS class(es) for "Forms" Gutenberg block:
" onmouseover="alert(1)" style="background:red;"Related
cve
cve
CVE-2023-0096
2023-02-06 20:15:13
nvd
nvd
CVE-2023-0096
2023-02-06 20:15:13
cvelist
cvelist
CVE-2023-0096 Happyforms < 1.22.0 - Contributor+ Stored XSS
2023-02-06 19:59:39
prion
prion
Cross site scripting
2023-02-06 20:15:00
wpvulndb
wpvulndb
Happyforms < 1.22.0 - Contributor+ Stored XSS
2023-01-13 00:00:00