Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbTnt24WPVDB-ID:C9D80AA4-A26D-4B3F-B7BF-9D2FB0560D7B
HistoryAug 10, 2023 - 12:00 a.m.

Store Locator WordPress < 1.4.13 - Reflected XSS

2023-08-1000:00:00
tnt24
wpscan.com
7
wordpress
store locator
xss
vulnerability
ajax
response
admin
security

0.0005 Low

EPSS

Percentile

17.0%

JSON

Description The plugin does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

PoC

Make a logged in admin open the URL below https://example.com/wp-admin/admin-ajax.php?action=asl_ajax_handler&amp;asl-nounce;=![]()

CPENameOperatorVersion
eq1.4.13

Related

cvelist 1
cve 1
wpexploit 1
prion 1
nvd 1
cvelist
cvelist
CVE-2023-4151 Store Locator WordPress < 1.4.13 - Reflected XSS
2023-09-04 11:26:58
cve
cve
CVE-2023-4151
2023-09-04 12:15:10
wpexploit
wpexploit
Store Locator WordPress < 1.4.13 - Reflected XSS
2023-08-10 00:00:00
prion
prion
Cross site scripting
2023-09-04 12:15:00
nvd
nvd
CVE-2023-4151
2023-09-04 12:15:10

0.0005 Low

EPSS

Percentile

17.0%

JSON
Related for WPVDB-ID:C9D80AA4-A26D-4B3F-B7BF-9D2FB0560D7B
cvelist1cve1wpexploit1prion1nvd1