Stock Quotes List <= 2.9.11 - Contributor+ Stored XSS

2023-09-2900:00:00

wpscan.com

plugin validation parameter cross-site scripting software

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

18.6%

JSON

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

References

patchstack.com/database/vulnerability/stock-quotes-list/wordpress-stock-quotes-list-plugin-2-9-9-cross-site-scripting-xss-vulnerability