Lucene search
WpvulndbWPVDB-ID:C753B553-DC67-444A-857E-717D17398447HistorySep 28, 2023 - 12:00 a.m.
Font Awesome More Icons <= 3.5 - Contributor+ Stored Cross-Site Scripting
2023-09-2800:00:00
wpscan.com
3
plugin vulnerability contributor-level permissions web scripts
Description The plugin does not properly sanitize and escape the ‘icon’ shortcode, leading to a potential Stored Cross-Site Scripting vulnerability. As a result, users with contributor-level permissions and above can inject arbitrary web scripts into pages.
Related
cve
cve
CVE-2023-5232
2023-09-28 05:15:46
cvelist
cvelist
CVE-2023-5232
2023-09-28 04:31:34
nvd
nvd
CVE-2023-5232
2023-09-28 05:15:46
prion
prion
Cross site scripting
2023-09-28 05:15:00
wordfence
wordfence
5.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.1%
Related for WPVDB-ID:C753B553-DC67-444A-857E-717D17398447