Lucene search
WpvulndbWPVDB-ID:E86FF4D5-D549-4C71-B80E-6A9B3BFDDBFCHistoryJan 18, 2023 - 12:00 a.m.
TemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS
2023-01-1800:00:00
wpscan.com
4
templatesnext toolkit
contributor role
stored xss
0.001 Low
EPSS
Percentile
23.5%
The plugin does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
PoC
[tx_heading tag=‘script’ heading_text=‘alert(/XSS/)’]
| CPE | Name | Operator | Version |
|---|---|---|---|
| templatesnext-toolkit | lt | 3.2.8 |
Related
cve
cve
CVE-2023-0333
2023-02-13 15:15:21
prion
prion
Cross site scripting
2023-02-13 15:15:00
nvd
nvd
CVE-2023-0333
2023-02-13 15:15:21
cvelist
cvelist
CVE-2023-0333 TemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS
2023-02-13 14:32:14
wpexploit
wpexploit
TemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS
2023-01-18 00:00:00