Lucene search

K
wpvulndbWpvulndbWPVDB-ID:E1AE3118-E1DA-410D-8875-E385813882E7
HistorySep 13, 2023 - 12:00 a.m.

Stock Ticker < 3.23.4 - Reflected XSS

2023-09-1300:00:00
wpscan.com
6
plugin vulnerability
reflected xss
page output
high privilege users
admin
software

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

39.9%

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

39.9%

Related for WPVDB-ID:E1AE3118-E1DA-410D-8875-E385813882E7