Lucene search

K
wpvulndbWpvulndbWPVDB-ID:897D8406-17DB-414C-A538-285EA0E211EE
HistoryJan 18, 2024 - 12:00 a.m.

Shortcodes Finder < 1.5.5 - Reflected Cross-Site Scripting

2024-01-1800:00:00
wpscan.com
4
wordpress
shortcodes finder
cross-site scripting
vulnerability
input sanitization
output escaping
unauthenticated access

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

Description The Shortcodes Finder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via an unknown parameter in versions up to, and including, 1.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

CPENameOperatorVersion
eq1.5.5

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

Related for WPVDB-ID:897D8406-17DB-414C-A538-285EA0E211EE