Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:44066039-E8A7-408C-96BC-657B01EF7C41
HistoryJun 19, 2023 - 12:00 a.m.

WP Sticky Social 1.0.1 - Stored XSS via CSRF

2023-06-1900:00:00
wpscan.com
5
wordpress plugin
stored xss
csrf attack

0.016 Low

EPSS

Percentile

87.6%

JSON

The plugin does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

CPENameOperatorVersion
wp-sticky-sociallt1.0.2

Related

zdt 1
cve 1
nvd 1
prion 1
cvelist 1
packetstorm 1
exploitdb 1
wordfence 1
zdt
zdt
WP Sticky Social 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting Exploit
2023-06-26 00:00:00
cve
cve
CVE-2023-3320
2023-06-20 03:15:09
nvd
nvd
CVE-2023-3320
2023-06-20 03:15:09
prion
prion
Cross site request forgery (csrf)
2023-06-20 03:15:00
cvelist
cvelist
CVE-2023-3320
2023-06-20 02:52:14
packetstorm
packetstorm
WordPress WP Sticky Social 1.0.1 CSRF / Cross Site Scripting
2023-06-21 00:00:00
exploitdb
exploitdb
WP Sticky Social 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (XSS)
2023-06-20 00:00:00
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (June 19, 2023 to June 25, 2023)
2023-06-29 13:24:24

0.016 Low

EPSS

Percentile

87.6%

JSON
Related for WPVDB-ID:44066039-E8A7-408C-96BC-657B01EF7C41
zdt1cve1nvd1prion1cvelist1packetstorm1exploitdb1wordfence1