Lucene search
WpvulndbWPVDB-ID:562F66B4-948E-4B27-92B1-6FB6272F73F0HistorySep 20, 2023 - 12:00 a.m.
Simple Download Counter < 1.6.1 - Contributor+ Stored XSS
2023-09-2000:00:00
wpscan.com
1
simple download counter
version 1.6.1
stored xss
contributor
cross-site scripting
high privilege users
plugin
Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 1.6.1 |
Related
prion
prion
Cross site scripting
2023-09-09 02:15:00
cve
cve
CVE-2023-4838
2023-09-09 02:15:46
nvd
nvd
CVE-2023-4838
2023-09-09 02:15:46
cnvd
cnvd
WordPress Simple Download Counter plugin cross-site scripting vulnerability
2023-09-12 00:00:00
cvelist
cvelist
CVE-2023-4838
2023-09-09 01:50:27
wordfence
wordfence
5.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.0%
Related for WPVDB-ID:562F66B4-948E-4B27-92B1-6FB6272F73F0