Lucene search
WpvulndbWPVDB-ID:89570379-769B-4684-B8A7-28C37B408E5DHistoryJul 17, 2023 - 12:00 a.m.
WPCode < 2.0.13.1 - Reflected XSS
2023-07-1700:00:00
wpscan.com
16
plugin security vulnerability url escape xss}
.
EPSS
0.001
Percentile
35.8%
Description The plugin does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting
PoC
Make a logged in admin open https://example.com/wp-admin/admin.php?page=wpcode&a;">=2
Related
openvas
openvas
cve
cve
CVE-2023-3524
2023-08-07 15:15:11
wpexploit
wpexploit
WPCode < 2.0.13.1 - Reflected XSS
2023-07-17 00:00:00
cvelist
cvelist
CVE-2023-3524 WPCode < 2.0.13.1 - Reflected XSS
2023-08-07 14:31:23
nvd
nvd
CVE-2023-3524
2023-08-07 15:15:11
prion
prion
Cross site scripting
2023-08-07 15:15:00