Lucene search
WpvulndbWPVDB-ID:8E8A00BF-0F38-456C-8EE8-5A78926BA1B4HistoryNov 08, 2023 - 12:00 a.m.
FLOWFACT WP Connector < 2.1.8 - Reflected XSS
2023-11-0800:00:00
wpscan.com
4
flowfact
wp connector
version 2.1.8
reflected xss
plugin
parameter sanitization
escape
security vulnerability
high privilege users
Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 2.1.8 |
Related
nvd
nvd
CVE-2023-46626
2023-11-08 16:15:10
prion
prion
Cross site scripting
2023-11-08 16:15:00
cvelist
cvelist
cve
cve
CVE-2023-46626
2023-11-08 16:15:10
wordfence
wordfence
6.3 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
Related for WPVDB-ID:8E8A00BF-0F38-456C-8EE8-5A78926BA1B4