Lucene search
WpvulndbWPVDB-ID:3C8DC17A-B545-4E83-AB35-852D8AACBE88HistoryMar 22, 2024 - 12:00 a.m.
Tracking Code Manager < 2.1.0 -Admin+ Stored Cross-Site Scripting
2024-03-2200:00:00
wpscan.com
6
plugin settings sanitize
high-privilege users
stored cross-site scripting
unfiltered html
multisite setup
software
Description The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 2.1.0 |
6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
8.7%
Related for WPVDB-ID:3C8DC17A-B545-4E83-AB35-852D8AACBE88