Lucene search

K
wpvulndbWpvulndbWPVDB-ID:84358D90-AA80-4174-ACAA-0AD05019C38F
HistoryOct 20, 2023 - 12:00 a.m.

Smart Cookie Kit < 2.3.2 - Contributor+ Stored XSS

2023-10-2000:00:00
wpscan.com
10
smart cookie kit
version 2.3.2
contributor role
stored xss
parameter validation
cross-site scripting

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

18.6%

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

18.6%

Related for WPVDB-ID:84358D90-AA80-4174-ACAA-0AD05019C38F