Lucene search

K
wpvulndbWpvulndbWPVDB-ID:DC6F04C2-7BF2-4A07-92B5-DD197E4D94C8
HistoryJan 06, 2022 - 12:00 a.m.

WordPress < 5.8.3 - Author+ Stored XSS via Post Slugs

2022-01-0600:00:00
wpscan.com
127
wordpress
stored xss
post slugs
authentication
javascript

EPSS

0.004

Percentile

72.5%

Low-privileged authenticated users (like author) in WordPress core are able to execute JavaScript/perform stored XSS attack via post slugs, which can affect high-privileged users.