Lucene search
WpvulndbWPVDB-ID:8887D062-DE5F-498E-8D31-8DE426419727HistoryMay 25, 2023 - 12:00 a.m.
IP Metaboxes <= 2.1.1 - Unauthenticated Reflected XSS
2023-05-2500:00:00
wpscan.com
6
ip metaboxes reflected xss parameter software admin privilege sanitation escape page output cross-site scripting
.
0.001 Low
EPSS
Percentile
19.9%
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| ip-metaboxes | eq | * |
Related
cvelist
cvelist
cve
cve
CVE-2023-30753
2023-06-12 14:15:18
nvd
nvd
CVE-2023-30753
2023-06-12 14:15:18
prion
prion
Cross site scripting
2023-06-12 14:15:00
wordfence
wordfence