Lucene search

K
wpvulndbWpvulndbWPVDB-ID:1C57FE04-FF10-4EF9-AFDF-FD998E70CC32
HistoryOct 20, 2023 - 12:00 a.m.

Auto Amazon Links < 5.3.2 - Contributor+ Stored XSS

2023-10-2000:00:00
wpscan.com
2
amazon links
vulnerability
stored xss
contributors
unfiltered_html
software

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

Description The plugin does not sanitize and escape some of its settings, which could allow contributor+ to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

CPENameOperatorVersion
eq5.3.2

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

Related for WPVDB-ID:1C57FE04-FF10-4EF9-AFDF-FD998E70CC32