Lucene search
WpvulndbWPVDB-ID:CCB1F3B5-AF02-4AC9-BF89-1236E31E383FHistoryMar 20, 2023 - 12:00 a.m.
Read More Without Refresh <= 3.1 - Admin+ Stored Cross-Site Scripting
2023-03-2000:00:00
wpscan.com
6
admin
settings
stored cross-site scripting
multisite
unfiltered_html
EPSS
0.001
Percentile
17.5%
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Related
cve
cve
CVE-2023-23793
2023-05-09 10:15:10
cvelist
cvelist
nvd
nvd
CVE-2023-23793
2023-05-09 10:15:10
prion
prion
Cross site scripting
2023-05-09 10:15:00