Lucene search
WpvulndbWPVDB-ID:CB38EE69-B505-48B5-AC0A-8C1707E9AF0DHistoryMar 13, 2023 - 12:00 a.m.
CMS Press <= 0.2.3 - Admin+ Stored XSS
2023-03-1300:00:00
wpscan.com
5
cms press
admin
stored xss
vulnerability
settings
multisite setup
unfiltered_html capability
EPSS
0.001
Percentile
17.5%
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Related
cvelist
cvelist
nvd
nvd
CVE-2023-25452
2023-05-08 13:15:09
prion
prion
Cross site scripting
2023-05-08 13:15:00
cve
cve
CVE-2023-25452
2023-05-08 13:15:09
wordfence
wordfence