Lucene search
WpvulndbWPVDB-ID:C26DB779-09AA-4279-8DED-3B7EE539BDB4HistoryApr 20, 2023 - 12:00 a.m.
Mail Subscribe List <= 2.1.9 - Contributor+ Stored XSS
2023-04-2000:00:00
wpscan.com
3
mail subscribe list
plugin
contributor
stored xss
cross-site scripting
software
0.0005 Low
EPSS
Percentile
17.5%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| mail-subscribe-list | lt | 2.1 |
Related
cve
cve
CVE-2023-23657
2023-05-16 10:15:09
prion
prion
Cross site scripting
2023-05-16 10:15:00
cvelist
cvelist
nvd
nvd
CVE-2023-23657
2023-05-16 10:15:09
wordfence
wordfence