Lucene search
Dmitrii IgnatyevWPVDB-ID:9784D7C8-E3AA-42AF-ACE8-5B2B37EBC9CBHistoryFeb 13, 2024 - 12:00 a.m.
Starbox < 3.5.0 - Contributor+ Stored XSS
2024-02-1300:00:00
Dmitrii Ignatyev
wpscan.com
2
starbox plugin
stored xss
cross-site scripting
contributor role
sanitization
security issue
Description The plugin does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks
PoC
http://132" onmouseover=‘alert(1)’
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 3.5.0 |
References
Related
nvd
nvd
CVE-2024-1273
2024-03-11 18:15:17
wpexploit
wpexploit
Starbox < 3.5.0 - Contributor+ Stored XSS
2024-02-13 00:00:00
cve
cve
CVE-2024-1273
2024-03-11 18:15:17
cvelist
cvelist
CVE-2024-1273 Starbox < 3.5.0 - Contributor+ Stored XSS
2024-03-11 17:56:05
prion
prion
Cross site scripting
2024-03-11 18:15:00
5.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for WPVDB-ID:9784D7C8-E3AA-42AF-ACE8-5B2B37EBC9CB