Lucene search
WpvulndbWPVDB-ID:9494C83D-4294-4993-973C-90FF07831C76HistorySep 28, 2023 - 12:00 a.m.
Font Awesome Integration <= 5.0 - Contributor+ Stored Cross-Site Scripting
2023-09-2800:00:00
wpscan.com
10
plugin
sanitize
escape
user-supplied
shortcode
injection
web scripts
pages
users
Description The plugin does not sufficiently sanitize and escape user-supplied attributes in the ‘fawesome’ shortcode, which can lead to the injection of arbitrary web scripts on pages accessed by users.
Related
cvelist
cvelist
CVE-2023-5233
2023-09-28 04:31:35
cve
cve
CVE-2023-5233
2023-09-28 05:15:46
nvd
nvd
CVE-2023-5233
2023-09-28 05:15:46
prion
prion
Cross site scripting
2023-09-28 05:15:00
wordfence
wordfence
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
18.6%
Related for WPVDB-ID:9494C83D-4294-4993-973C-90FF07831C76