Lucene search
WpvulndbWPVDB-ID:EB28D4E5-B8D2-4600-BF0D-DC012C25CFAAHistoryApr 19, 2023 - 12:00 a.m.
WP Links Page < 4.9.4 - Contributor+ Stored XSS
2023-04-1900:00:00
wpscan.com
7
wordpress
plugin
stored xss
cross-site scripting
security vulnerability
EPSS
0.001
Percentile
17.5%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Related
nvd
nvd
CVE-2023-22720
2023-05-11 15:15:10
prion
prion
Cross site scripting
2023-05-11 15:15:00
cvelist
cvelist
cve
cve
CVE-2023-22720
2023-05-11 15:15:10
wordfence
wordfence