Lucene search
WpvulndbWPVDB-ID:5A618AFA-01A6-4742-905F-4252E6B5C49EHistoryDec 09, 2023 - 12:00 a.m.
Structured Content < 1.6 - Contributor+ Stored XSS
2023-12-0900:00:00
wpscan.com
4
structured content
stored xss
input sanitization
output escaping
authenticated attackers
contributor-level access
arbitrary web scripts
executable pages
vulnerable software
Description The plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 1.6 |
Related
cvelist
cvelist
cve
cve
CVE-2023-49820
2023-12-14 16:15:52
prion
prion
Cross site scripting
2023-12-14 16:15:00
nvd
nvd
CVE-2023-49820
2023-12-14 16:15:52
wordfence
wordfence
5.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.1%
Related for WPVDB-ID:5A618AFA-01A6-4742-905F-4252E6B5C49E