Lucene search
Fayçal CHENAWPEX-ID:E124D1AB-3E02-4CA5-8218-CE635E8BF074HistoryMay 02, 2022 - 12:00 a.m.
Tabs Responsive < 2.2.8 - Editor+ Stored Cross-Site Scripting
2022-05-0200:00:00
Fayçal CHENA
81
0.001 Low
EPSS
Percentile
25.0%
The plugin does not sanitise and escape Tab descriptions, which could allow high privileged users with a role as low as editor to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Create/edit a Tab via the plugin, and put the following payload in a Tab description: "><img src onerror=alert(/XSS/)>
The XSS will be triggered in posts/pages where the Tab is embed via the [TABS_R id=XXXX] shortcodeRelated
cvelist
cvelist
CVE-2022-1298 Tabs Responsive < 2.2.8 - Editor+ Stored Cross-Site Scripting
2022-05-23 07:15:32
cve
cve
CVE-2022-1298
2022-05-23 08:16:07
patchstack
patchstack
nvd
nvd
CVE-2022-1298
2022-05-23 08:16:07
prion
prion
Cross site scripting
2022-05-23 08:16:00
wpvulndb
wpvulndb
Tabs Responsive < 2.2.8 - Editor+ Stored Cross-Site Scripting
2022-05-02 00:00:00