Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbP7e4WPVDB-ID:1C55FDA9-E938-4267-BE77-A6D73EE46AF3
HistoryApr 04, 2022 - 12:00 a.m.

Menubar < 5.8 - Reflected Cross-Site Scripting

2022-04-0400:00:00
p7e4
wpscan.com
10

0.001 Low

EPSS

Percentile

24.8%

JSON

The plugin does not sanitise and escape the command parameter before outputting it back in the response via the menubar AJAX action (available to any authenticated users), leading to a Reflected Cross-Site Scripting

PoC

CPENameOperatorVersion
menubarlt5.8

Related

wpexploit 1
cvelist 1
cve 1
prion 1
patchstack 1
nvd 1
wpexploit
wpexploit
Menubar < 5.8 - Reflected Cross-Site Scripting
2022-04-04 00:00:00
cvelist
cvelist
CVE-2022-1152 Menubar < 5.8 - Reflected Cross-Site Scripting
2022-04-25 15:51:18
cve
cve
CVE-2022-1152
2022-04-25 16:16:08
prion
prion
Cross site scripting
2022-04-25 16:16:00
patchstack
patchstack
WordPress Menubar plugin <= 5.7.2 - Reflected Cross-Site Scripting (XSS) vulnerability
2022-03-29 00:00:00
nvd
nvd
CVE-2022-1152
2022-04-25 16:16:08

0.001 Low

EPSS

Percentile

24.8%

JSON
Related for WPVDB-ID:1C55FDA9-E938-4267-BE77-A6D73EE46AF3
wpexploit1cvelist1cve1prion1patchstack1nvd1