Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:100E2417-FDED-44B5-89FC-FC265D5870F0
HistoryOct 31, 2023 - 12:00 a.m.

WPPizza < 3.18.3 - Reflected XSS

2023-10-3100:00:00
wpscan.com
5
wppizza
plugin
xss
vulnerability
sanitise
escape
parameters
outputting
page
cross-site scripting
high privilege
users
admin

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Related

cve 1
cvelist 1
prion 1
vulnrichment 1
nvd 1
wordfence 1
cve
cve
CVE-2023-46622
2023-10-31 10:15:08
cvelist
cvelist
CVE-2023-46622 WordPress WPPizza Plugin <= 3.18.2 is vulnerable to Cross Site Scripting (XSS)
2023-10-31 09:43:22
prion
prion
Cross site scripting
2023-10-31 10:15:00
vulnrichment
vulnrichment
CVE-2023-46622 WordPress WPPizza Plugin <= 3.18.2 is vulnerable to Cross Site Scripting (XSS)
2023-10-31 09:43:22
nvd
nvd
CVE-2023-46622
2023-10-31 10:15:08
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 23, 2023 to October 29, 2023)
2023-11-02 18:40:49

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON
Related for WPVDB-ID:100E2417-FDED-44B5-89FC-FC265D5870F0
cve1cvelist1prion1vulnrichment1nvd1wordfence1