Lucene search
WpvulndbWPVDB-ID:8713C12D-CEB9-47B8-8F42-CD4403A1222CHistoryMar 08, 2023 - 12:00 a.m.
Daily Prayer Time <= 2023.05.04 - Contributor+ Stored XSS
2023-03-0800:00:00
wpscan.com
1
2023.05.04
contributor role
stored cross-site scripting
plugin vulnerability
shortcode attributes
0.0005 Low
EPSS
Percentile
17.7%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| daily-prayer-time-for-mosques | eq | * |
Related
cve
cve
CVE-2023-27631
2023-06-22 08:15:09
cvelist
cvelist
nvd
nvd
CVE-2023-27631
2023-06-22 08:15:09
prion
prion
Cross site scripting
2023-06-22 08:15:00
wordfence
wordfence