Lucene search
WpvulndbWPVDB-ID:60226669-0B7B-441F-93D4-B5933E69478FHistoryMay 15, 2023 - 12:00 a.m.
Stop Spammers Security < 2023 - Reflected XSS
2023-05-1500:00:00
wpscan.com
5
stop spammers security
sanitise parameters
escape
reflected cross-site scripting
admin dashboard
poc
0.001 Low
EPSS
Percentile
25.0%
The plugin does not sanitise and escape various parameters before outputting them back in admin dashboard pages, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
PoC
Make a logged in admin open a page containing the code below
| CPE | Name | Operator | Version |
|---|---|---|---|
| stop-spammer-registrations-plugin | lt | 2023 |
Related
nvd
nvd
CVE-2023-2488
2023-06-05 14:15:10
wpexploit
wpexploit
Stop Spammers Security < 2023 - Reflected XSS
2023-05-15 00:00:00
cve
cve
CVE-2023-2488
2023-06-05 14:15:10
prion
prion
Cross site scripting
2023-06-05 14:15:00
cvelist
cvelist
CVE-2023-2488 Stop Spammers Security < 2023 - Reflected XSS
2023-06-05 13:38:59