Lucene search

K
wpvulndbWpvulndbWPVDB-ID:338DE931-2175-410E-8779-594A1B57E59A
HistoryOct 20, 2023 - 12:00 a.m.

User Location and IP <= 1.7 - Contributor+ Stored XSS

2023-10-2000:00:00
wpscan.com
1
plugin
stored xss
contributor role
validation
escaping
software
ip.

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

Related for WPVDB-ID:338DE931-2175-410E-8779-594A1B57E59A