Lucene search
WpvulndbWPVDB-ID:1F24DB34-F608-4463-B4EE-9BC237774256HistoryJan 23, 2023 - 12:00 a.m.
WP Helper Lite < 4.3 - Reflected Cross-Site Scripting
2023-01-2300:00:00
wpscan.com
5
wordpress plugin
reflected xss
ajax response
security vulnerability
0.001 Low
EPSS
Percentile
46.4%
The plugin does not sanitise and escape all GET parameters before outputting them back in an AJAX response, leading to a Reflected Cross-Site Scripting
PoC
https://example.com/wp-admin/admin-ajax.php?action=surveySubmit&a;=">
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp-helper-lite | lt | 4.3 |
Related
nuclei
nuclei
WP Helper Lite < 4.3 - Cross-Site Scripting
2023-07-17 18:18:03
openvas
openvas
WordPress WP Helper Lite Plugin < 4.3 XSS Vulnerability
2023-08-28 00:00:00
nvd
nvd
CVE-2023-0448
2023-01-26 21:18:08
prion
prion
Cross site scripting
2023-01-26 21:18:00
cve
cve
CVE-2023-0448
2023-01-26 21:18:08
cvelist
cvelist
CVE-2023-0448
2023-01-24 00:00:00
wpexploit
wpexploit
WP Helper Lite < 4.3 - Reflected Cross-Site Scripting
2023-01-23 00:00:00