GS Portfolio for Envato < 1.4.0 - Contributor+ Stored XSS. The plugin allows stored cross-site scripting attacks by not validating and escaping some shortcode attributes before outputting them in a page/post
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
Cvelist | CVE-2023-0559 GS Portfolio for Envato < 1.4.0 - Contributor+ Stored XSS | 21 Feb 202308:50 | – | cvelist |
wpexploit | GS Portfolio for Envato < 1.4.0 - Contributor+ Stored XSS | 30 Jan 202300:00 | – | wpexploit |
CVE | CVE-2023-0559 | 21 Feb 202309:15 | – | cve |
Prion | Cross site scripting | 21 Feb 202309:15 | – | prion |
NVD | CVE-2023-0559 | 21 Feb 202309:15 | – | nvd |
Patchstack | WordPress GS Portfolio for Envato Plugin < 1.4.0 is vulnerable to Cross Site Scripting (XSS) | 31 Jan 202300:00 | – | patchstack |
Wordfence Blog | Wordfence Intelligence CE Weekly Vulnerability Report (1-30-2023 to 2-5-2023) | 9 Feb 202315:31 | – | wordfence |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo