Lucene search

K
wpvulndbWpvulndbWPVDB-ID:D5B95156-EDA4-4BD4-BD56-81672F345700
HistoryAug 16, 2023 - 12:00 a.m.

User Submitted Posts < 20230811 - Unauthenticated Stored XSS

2023-08-1600:00:00
wpscan.com
1
plugin
sanitize
escape
user-submitted-content
unauthenticated
stored xss
attacks

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

Description The plugin does not sanitize and escape the user-submitted-content parameter, which could allow unauthenticated users to perform Stored XSS attacks

CPENameOperatorVersion
eq20230811

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

Related for WPVDB-ID:D5B95156-EDA4-4BD4-BD56-81672F345700