Lucene search
WpvulndbWPVDB-ID:927EBDE5-B6AA-4DE9-B830-1DC009D6D168HistorySep 18, 2023 - 12:00 a.m.
Livestream Notice < 1.3.0 - Admin+ Stored XSS
2023-09-1800:00:00
wpscan.com
6
livestream
notice
plugin
admin
stored
xss
validation
escape
parameters
admin role
unfiltered html
capability
Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Related
cvelist
cvelist
nvd
nvd
CVE-2023-27621
2023-08-30 16:15:09
prion
prion
Cross site scripting
2023-08-30 16:15:00
cve
cve
CVE-2023-27621
2023-08-30 16:15:09
wordfence
wordfence
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
23.9%
Related for WPVDB-ID:927EBDE5-B6AA-4DE9-B830-1DC009D6D168