Shortcode for Font Awesome contributor+ Stored XSS. Plugin does not validate and escape some shortcode attributes before outputting, allowing contributors to perform Stored Cross-Site Scripting attacks
Reporter | Title | Published | Views | Family All 6 |
---|---|---|---|---|
Patchstack | WordPress Shortcode for Font Awesome Plugin < 1.4.1 is vulnerable to Cross Site Scripting (XSS) | 24 Jan 202300:00 | – | patchstack |
wpexploit | Shortcode for Font Awesome < 1.4.1 - Contributor+ Stored XSS | 24 Jan 202300:00 | – | wpexploit |
Cvelist | CVE-2023-0419 Shortcode for Font Awesome < 1.4.1 - Contributor+ Stored XSS | 21 Feb 202308:51 | – | cvelist |
CVE | CVE-2023-0419 | 21 Feb 202309:15 | – | cve |
Prion | Cross site scripting | 21 Feb 202309:15 | – | prion |
NVD | CVE-2023-0419 | 21 Feb 202309:15 | – | nvd |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo