Lucene search
WpvulndbWPVDB-ID:5A2C8576-9B1A-419A-B1CE-A12912B5F68AHistoryMay 17, 2023 - 12:00 a.m.
Waiting: One-click countdowns <= 0.6.2 - Subscriber+ Stored XSS
2023-05-1700:00:00
wpscan.com
3
plugin
xss
sanitisation
escaping
authorization
cross-site scripting
0.001 Low
EPSS
Percentile
42.7%
The plugin does not sanitise and escape some parameters, and is missing proper authorisation, which could allow any authenticated users, such as subscriber to perform Cross-Site Scripting attacks
Related
cve
cve
CVE-2023-2757
2023-05-18 03:15:11
cvelist
cvelist
CVE-2023-2757
2023-05-18 02:04:29
prion
prion
Design/Logic Flaw
2023-05-18 03:15:00
nvd
nvd
CVE-2023-2757
2023-05-18 03:15:11
wordfence
wordfence