Lucene search

K
wpvulndbWpvulndbWPVDB-ID:EA14EE55-9677-4BBA-A830-E5791C2CCB4E
HistoryNov 08, 2023 - 12:00 a.m.

Add to Calendar Button < 1.5.1 - Contributor+ Stored XSS

2023-11-0800:00:00
wpscan.com
4
plugin
vulnerability
xss
contributor role
security
risk

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

CPENameOperatorVersion
eq1.5.1

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

Related for WPVDB-ID:EA14EE55-9677-4BBA-A830-E5791C2CCB4E