Lucene search
WpvulndbWPVDB-ID:50EFEAC7-3C56-460D-87B5-B49177626289HistoryOct 20, 2023 - 12:00 a.m.
Photospace Responsive < 2.1.2 - Admin+ Stored XSS
2023-10-2000:00:00
wpscan.com
2
photospace responsive
version 2.1.2
stored xss
admin
unsanitized settings
cross-site scripting
high-privilege users
unfiltered html
multisite setup
Description The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 2.1.2 |
Related
cve
cve
CVE-2023-4271
2023-10-20 07:15:15
nvd
nvd
CVE-2023-4271
2023-10-20 07:15:15
cvelist
cvelist
CVE-2023-4271
2023-10-20 06:35:18
prion
prion
Cross site scripting
2023-10-20 07:15:00
wordfence
wordfence
5.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.2%
Related for WPVDB-ID:50EFEAC7-3C56-460D-87B5-B49177626289