Lucene search
WpvulndbWPVDB-ID:B786E492-8891-4174-B981-4E53ECFD75ABHistoryDec 10, 2023 - 12:00 a.m.
Alma < 5.2.1 - Contributor+ Stored XSS
2023-12-1000:00:00
wpscan.com
9
alma
plugin
stored xss
vulnerability
input sanitization
output escaping
authenticated attackers
contributor-level access
Description The plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Related
cvelist
cvelist
prion
prion
Cross site scripting
2023-12-14 14:15:00
cve
cve
CVE-2023-50369
2023-12-14 14:15:44
nvd
nvd
CVE-2023-50369
2023-12-14 14:15:44
wordfence
wordfence
AI Score
5.4
Confidence
High
EPSS
0
Percentile
14.0%
Related for WPVDB-ID:B786E492-8891-4174-B981-4E53ECFD75AB