Lucene search

K
wpvulndbWpvulndbWPVDB-ID:6D2C7F2A-1528-4E00-92C0-113E97E237AD
HistorySep 07, 2023 - 12:00 a.m.

Font Awesome 4 Menus <= 4.7.0 - Contributor+ Stored XSS

2023-09-0700:00:00
wpscan.com
5
font awesome
menus
stored xss
contributor role

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

34.5%

Description The plugin does not validate and escape some of its fa and fa-stack shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

34.5%

Related for WPVDB-ID:6D2C7F2A-1528-4E00-92C0-113E97E237AD