Lucene search

K
wpvulndbWpvulndbWPVDB-ID:242556AE-FA29-4961-AFE6-7A8421D90450
HistorySep 18, 2023 - 12:00 a.m.

WxSync <= 2.7.23 - Contributor+ Stored XSS

2023-09-1800:00:00
wpscan.com
2
wxsync
stored xss
contributor

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

Related for WPVDB-ID:242556AE-FA29-4961-AFE6-7A8421D90450