Lucene search

K
wpvulndbWpvulndbWPVDB-ID:5AD84192-2853-4A63-B49A-B4B55B13D09E
HistoryJul 17, 2019 - 12:00 a.m.

WP Code Highlight.js < 0.6.3 - CSRF to Stored XSS

2019-07-1700:00:00
wpscan.com
13

0.008 Low

EPSS

Percentile

82.2%

Lack of CSRF checks could allow attackers to make a logged in admin create XSS payloads.

PoC

CPENameOperatorVersion
wp-code-highlightjslt0.6.3

0.008 Low

EPSS

Percentile

82.2%

Related for WPVDB-ID:5AD84192-2853-4A63-B49A-B4B55B13D09E