Lucene search
Erwan LR (WPScan)WPVDB-ID:58803934-DBD3-422D-88E7-EBBC5E8C0886HistoryDec 15, 2023 - 12:00 a.m.
Email Subscription Popup < 1.2.20 - Reflected XSS
2023-12-1500:00:00
Erwan LR (WPScan)
wpscan.com
4
email subscription popup
reflected xss
vulnerability
admin
parameter escaping
Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
PoC
Make a logged in admin open
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 1.2.20 |
Related
cvelist
cvelist
CVE-2023-6555 Email Subscription Popup < 1.2.20 - Reflected XSS
2024-01-08 19:00:27
nvd
nvd
CVE-2023-6555
2024-01-08 19:15:10
cve
cve
CVE-2023-6555
2024-01-08 19:15:10
prion
prion
Cross site scripting
2024-01-08 19:15:00
wpexploit
wpexploit
Email Subscription Popup < 1.2.20 - Reflected XSS
2023-12-15 00:00:00
5.8 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
Related for WPVDB-ID:58803934-DBD3-422D-88E7-EBBC5E8C0886