Lucene search
Word Balloon < 4.19.3 - Contributor+ Stored XSS via Shortcode
Word Balloon < 4.19.3 Contributor+ Stored XSS via Shortcode. Plugin allows stored XSS via unvalidated shortcode attributes, enabling contributors to attack high privilege users
Show more
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | Word Balloon < 4.19.3 - Contributor+ Stored XSS via Shortcode | 28 Dec 202200:00 | – | wpexploit |
 | Cross site scripting | 23 Jan 202315:15 | – | prion |
 | CVE-2022-4751 | 23 Jan 202315:15 | – | nvd |
 | CVE-2022-4751 Word Balloon < 4.19.3 - Contributor+ Stored XSS via Shortcode | 23 Jan 202314:31 | – | cvelist |
 | CVE-2022-4751 | 23 Jan 202315:15 | – | cve |
 | WordPress Word Balloon Plugin < 4.19.3 is vulnerable to Cross Site Scripting (XSS) | 28 Dec 202200:00 | – | patchstack |
Node
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo28 Dec 2022 00:00Current
3.2Low risk
Vulners AI Score3.2
EPSS0.001