Lucene search
WpvulndbWPVDB-ID:486360E0-5C9F-4CB7-86DC-75F78736C7B1HistoryFeb 22, 2023 - 12:00 a.m.
Hero Banner Ultimate <= 1.3.4 - Contributor+ Stored XSS
2023-02-2200:00:00
wpscan.com
3
plugin
contributor
stored xss
cross-site scripting
software
0.0005 Low
EPSS
Percentile
17.7%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| hero-banner-ultimate | eq | * |
Related
nvd
nvd
CVE-2022-45818
2023-05-04 13:15:13
prion
prion
Cross site scripting
2023-05-04 13:15:00
cvelist
cvelist
cve
cve
CVE-2022-45818
2023-05-04 13:15:13
wordfence
wordfence