Shield Security < 18.5.8 - Unauthenticated Stored Cross-Site Scripting

2024-01-2400:00:00

wpscan.com

stored cross-site scripting

insufficient input sanitization

output escaping

unauthenticated attackers

arbitrary web scripts

plugin vulnerability

6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Description The plugin is vulnerable to Stored Cross-Site Scripting via the getColumnContent_Page function due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.