Lucene search
Lana CodesWPEX-ID:D6A9CFAA-D3FA-442E-A9A1-B06588723E39HistoryDec 16, 2022 - 12:00 a.m.
Logo Slider < 3.6.0 - Contributor+ Stored XSS in Shortcode
2022-12-1600:00:00
Lana Codes
52
logo slider
stored xss
shortcode
contributor
exploit
0.001 Low
EPSS
Percentile
23.3%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Note: First, you need to add a Logo Slider.
Exploit: [logo-slider border='yes' bordercolor='red" onmouseover="alert(1)"']Related
cnvd
cnvd
WordPress plugin Logo Slider cross-site scripting vulnerability
2023-02-08 00:00:00
wpvulndb
wpvulndb
Logo Slider < 3.6.0 - Contributor+ Stored XSS in Shortcode
2022-12-16 00:00:00
prion
prion
Cross site scripting
2023-02-06 20:15:00
cvelist
cvelist
CVE-2022-4664 Logo Slider < 3.6.0 - Contributor+ Stored XSS in Shortcode
2023-02-06 19:59:12
cve
cve
CVE-2022-4664
2023-02-06 20:15:11
nvd
nvd
CVE-2022-4664
2023-02-06 20:15:11