Lucene search

K
wpvulndbWpvulndbWPVDB-ID:018FD2D7-5F76-45EC-88E8-0369B89221B8
HistoryNov 17, 2022 - 12:00 a.m.

iFeature Slider <= 1.2 - Contributor+ Stored XSS

2022-11-1700:00:00
wpscan.com
8
plugin
sanitisation
parameters
contributor
stored xss
attacks

EPSS

0.001

Percentile

22.7%

The plugin does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks

EPSS

0.001

Percentile

22.7%

Related for WPVDB-ID:018FD2D7-5F76-45EC-88E8-0369B89221B8