Lucene search
WpvulndbWPVDB-ID:BA2936FC-7098-4834-8985-4C00D6EBDBBEHistoryAug 07, 2023 - 12:00 a.m.
Rank Math SEO < 1.0.119.1 - Contributor+ Stored XSS
2023-08-0700:00:00
wpscan.com
7
rank math seo
version 1.0.119.1
contributor role
stored xss
unvalidated shortcode
Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| seo-by-rank-math | eq | 1.0.119.1 |
Related
cve
cve
CVE-2023-32600
2023-08-06 00:15:09
cvelist
cvelist
openvas
openvas
WordPress Rank Math SEO Plugin < 1.0.119.1 XSS Vulnerability
2023-08-08 00:00:00
prion
prion
Cross site scripting
2023-08-06 00:15:00
nvd
nvd
CVE-2023-32600
2023-08-06 00:15:09
wordfence
wordfence
5.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.2%
Related for WPVDB-ID:BA2936FC-7098-4834-8985-4C00D6EBDBBE