Lucene search
WpvulndbWPVDB-ID:9B3C8BE1-2522-43FB-B0AE-7739DD46079EHistoryMay 22, 2023 - 12:00 a.m.
Rank Math SEO PRO < 3.0.36 - Unauthenticated Reflected XSS
2023-05-2200:00:00
wpscan.com
16
plugin
sanitize
escape
parameter
unauthenticated attacker
web scripts
crafted link
page
EPSS
0.001
Percentile
18.4%
The plugin does not sanitize and escape a parameter before outputting it back in the page, allowing an unauthenticated attacker to inject web scripts that will execute when a visitor follows a crafted link to the page.
Related
nvd
nvd
CVE-2023-32800
2023-05-28 19:15:09
prion
prion
Cross site scripting
2023-05-28 19:15:00
cvelist
cvelist
cve
cve
CVE-2023-32800
2023-05-28 19:15:09
wordfence
wordfence