Lucene search
WpvulndbWPVDB-ID:DA1D3ECC-BB2F-4CDF-8E23-5E12F4B75169HistoryAug 31, 2023 - 12:00 a.m.
Order Tracking Pro < 3.3.7 - Admin+ Stored Cross-Site Scripting
2023-08-3100:00:00
wpscan.com
plugin vulnerability
order status parameter
admin role
cross-site scripting
Description The plugin does not sanitise and escape the order status parameter, which could allow users with a role of Admin to perform Cross-Site Scripting attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 3.3.7 |
Related
nvd
nvd
CVE-2023-4500
2023-08-31 06:15:11
cve
cve
CVE-2023-4500
2023-08-31 06:15:11
cvelist
cvelist
CVE-2023-4500
2023-08-31 05:33:12
prion
prion
Cross site scripting
2023-08-31 06:15:00
wordfence
wordfence
6.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.1%
Related for WPVDB-ID:DA1D3ECC-BB2F-4CDF-8E23-5E12F4B75169