Lucene search
Lana CodesWPEX-ID:C8982B8D-985F-4A5D-840D-E8BE7C3405BDHistoryFeb 20, 2023 - 12:00 a.m.
Juicer < 1.11 - Contributor+ Stored XSS
2023-02-2000:00:00
Lana Codes
49
juicer vulnerability
stored xss
contributor+ role
0.001 Low
EPSS
Percentile
23.4%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
[juicer name='" onmouseover=alert(/XSS/) style="background:red;"']Related
cve
cve
CVE-2023-0172
2023-03-13 17:15:12
prion
prion
Cross site scripting
2023-03-13 17:15:00
nvd
nvd
CVE-2023-0172
2023-03-13 17:15:12
wpvulndb
wpvulndb
Juicer < 1.11 - Contributor+ Stored XSS
2023-02-20 00:00:00
cvelist
cvelist
CVE-2023-0172 Juicer < 1.11 - Contributor+ Stored XSS
2023-03-13 16:03:33