Lucene search

K
wpvulndbWpvulndbWPVDB-ID:E3C5CCCD-2ADC-407A-BD3C-2F9B02442070
HistoryOct 16, 2023 - 12:00 a.m.

BuddyMeet < 2.3.0 - Contributor+ Stored XSS

2023-10-1600:00:00
wpscan.com
8
buddymeet
stored xss
plugin vulnerability
contributor+ role
cross-site scripting
security issue

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

18.6%

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

18.6%

Related for WPVDB-ID:E3C5CCCD-2ADC-407A-BD3C-2F9B02442070