Lucene search
WpvulndbWPVDB-ID:7196288B-0563-4366-8C2C-AED7BD0CF6F6HistoryJan 20, 2023 - 12:00 a.m.
WP Time Slots Booking Form < 1.1.82 - Admin+ Stored XSS
2023-01-2000:00:00
wpscan.com
9
wordpress
plugin
stored xss
security vulnerability
privilege escalation
unfiltered html
cross-site scripting
multisite
0.001 Low
EPSS
Percentile
21.2%
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp-time-slots-booking-form | lt | 1.1.82 |
Related
cvelist
cvelist
cve
cve
CVE-2023-23971
2023-04-06 06:15:08
nvd
nvd
CVE-2023-23971
2023-04-06 06:15:08
prion
prion
Cross site scripting
2023-04-06 06:15:00