Lucene search
WpvulndbWPVDB-ID:B3D98C33-76FA-4C2B-B438-906702377FB8HistoryDec 12, 2023 - 12:00 a.m.
Google Calendar Events < 3.2.8 - Contributor+ Stored XSS via shortcode
2023-12-1200:00:00
wpscan.com
10
google calendar
events
plugin
validation
escape
shortcode
attributes
page
post
contributor
stored xss
cross-site scripting
0.0004 Low
EPSS
Percentile
14.2%
Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 3.2.8 |
Related
prion
prion
Cross site scripting
2023-12-14 18:15:00
nvd
nvd
CVE-2023-49151
2023-12-14 18:15:44
cve
cve
CVE-2023-49151
2023-12-14 18:15:44
cvelist
cvelist