Lucene search
David Suho LeeWPEX-ID:DDE0767D-1DFF-4261-ADBE-1F3FDF2D9AAEHistoryDec 18, 2023 - 12:00 a.m.
WP Custom Cursors <= 3.2 - Admin+ Stored XSS
2023-12-1800:00:00
David Suho Lee
153
wordpress
custom cursors
stored xss
admin+
exploit
security
update
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
The PoC will be displayed on February 18, 2024, to give users the time to update.Related
wpvulndb
wpvulndb
WP Custom Cursors <= 3.2 - Admin+ Stored XSS
2023-12-18 00:00:00
prion
prion
Cross site scripting
2024-01-08 19:15:00
cvelist
cvelist
CVE-2023-5911 WP Custom Cursors <= 3.2 - Admin+ Stored XSS
2024-01-08 19:00:37
nvd
nvd
CVE-2023-5911
2024-01-08 19:15:09
cve
cve
CVE-2023-5911
2024-01-08 19:15:09
AI Score
6
Confidence
High
EPSS
0
Percentile
14.0%
Related for WPEX-ID:DDE0767D-1DFF-4261-ADBE-1F3FDF2D9AAE