Lucene search
WpvulndbWPVDB-ID:76D27708-274B-4610-8CAE-8AB31DEF1009HistoryDec 15, 2023 - 12:00 a.m.
Featured Image from URL (FIFU) < 4.5.4 - Contributor+ Stored XSS
2023-12-1500:00:00
wpscan.com
7
plugin vulnerability
xss attack
stored xss
contributor role
image alt text
Description The plugin does not sanitise and escape the featured image alt text, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks
Related
cvelist
cvelist
CVE-2023-6561
2024-01-11 08:33:01
cve
cve
CVE-2023-6561
2024-01-11 09:15:49
prion
prion
Cross site scripting
2024-01-11 09:15:00
nvd
nvd
CVE-2023-6561
2024-01-11 09:15:49
wordfence
wordfence
AI Score
5.8
Confidence
High
EPSS
0.001
Percentile
20.0%
Related for WPVDB-ID:76D27708-274B-4610-8CAE-8AB31DEF1009