Lucene search
Enrico Marcolini, Claudio MarchesiniWPVDB-ID:AA868380-CDA7-4EC6-8A3F-D9FA692908F2HistoryOct 09, 2023 - 12:00 a.m.
Fattura24 < 6.2.8 - Reflected Cross-Site Scripting
2023-10-0900:00:00
Enrico Marcolini, Claudio Marchesini
wpscan.com
9
fattura24
cross-site scripting
vulnerability
plugin
EPSS
0.001
Percentile
17.0%
Description The plugin does not sanitize or escape the ‘id’ parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting vulnerability.
PoC
wp-admin/options-general.php?page=fatt-24-tax&id;=12
Related
cvelist
cvelist
CVE-2023-5211 Fattura24 < 6.2.8 - Reflected Cross-Site Scripting
2023-10-31 13:54:45
wpexploit
wpexploit
Fattura24 < 6.2.8 - Reflected Cross-Site Scripting
2023-10-09 00:00:00
prion
prion
Cross site scripting
2023-10-31 14:15:00
cve
cve
CVE-2023-5211
2023-10-31 14:15:12
nvd
nvd
CVE-2023-5211
2023-10-31 14:15:12
wordfence
wordfence