Lucene search
WpvulndbWPVDB-ID:4CBBF285-4B38-475A-84FB-994B5487D63FHistoryFeb 13, 2023 - 12:00 a.m.
Fancy Comments WordPress < 1.2.11 - Contributor+ Stored XSS
2023-02-1300:00:00
wpscan.com
9
wordpress
fancy comments
plugin
xss
vulnerability
contributor
stored cross-site scripting
software
EPSS
0.001
Percentile
21.0%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Related
prion
prion
Cross site scripting
2023-03-30 11:15:00
cvelist
cvelist
nvd
nvd
CVE-2023-23670
2023-03-30 11:15:06
cve
cve
CVE-2023-23670
2023-03-30 11:15:06
wordfence
wordfence