Lucene search
WpvulndbWPVDB-ID:EE8D759D-C620-4CEC-9C27-3F35452F1F67HistoryOct 25, 2023 - 12:00 a.m.
Amministrazione Trasparente < 8.0.5 - Admin+ Stored XSS
2023-10-2500:00:00
wpscan.com
2
amministrazione trasparente
stored xss
admin role
unfiltered html
multisite
Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
References
patchstack.com/database/vulnerability/amministrazione-trasparente/wordpress-amministrazione-trasparente-plugin-8-0-2-cross-site-scripting-xss-vulnerability
www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/amministrazione-trasparente/amministrazione-trasparente-802-authenticated-administrator-stored-cross-site-scripting
Related
cvelist
cvelist
cve
cve
CVE-2023-45758
2023-10-25 18:17:34
prion
prion
Cross site scripting
2023-10-25 18:17:00
nvd
nvd
CVE-2023-45758
2023-10-25 18:17:34
vulnrichment
vulnrichment
wordfence
wordfence
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
18.6%
Related for WPVDB-ID:EE8D759D-C620-4CEC-9C27-3F35452F1F67