Lucene search
WpvulndbWPVDB-ID:0A24888F-1A45-430C-8B78-EE47AF6CC445HistoryAug 16, 2023 - 12:00 a.m.
External Videos <= 2.0.1 - Admin+ Stored XSS
2023-08-1600:00:00
wpscan.com
4
external videos
admin role
stored xss
multisite setup
software vulnerability
Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Related
vulnrichment
vulnrichment
nvd
nvd
CVE-2023-30752
2023-08-14 15:15:11
prion
prion
Cross site scripting
2023-08-14 15:15:00
cnvd
cnvd
Hospital Management System SQL Injection Vulnerability (CNVD-2023-64629)
2023-08-16 00:00:00
cvelist
cvelist
cve
cve
CVE-2023-30752
2023-08-14 15:15:11
wordfence
wordfence
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
18.3%
Related for WPVDB-ID:0A24888F-1A45-430C-8B78-EE47AF6CC445