Lucene search
WpvulndbWPVDB-ID:F138EAFB-7E9E-4885-B84F-737ADE0C1E9AHistoryAug 07, 2023 - 12:00 a.m.
wpShopGermany IT-RECHT KANZLEI < 1.8 - Admin+ Stored XSS
2023-08-0700:00:00
wpscan.com
20
plugin
vulnerability
stored xss
security
admin
settings
privilege
users
unfiltered_html
capability
multisite
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
| CPE | Name | Operator | Version |
|---|---|---|---|
| wpshopgermany-it-recht-kanzlei | eq | 1.8 |
Related
cve
cve
CVE-2023-37993
2023-07-27 14:15:09
cvelist
cvelist
nvd
nvd
CVE-2023-37993
2023-07-27 14:15:09
prion
prion
Cross site scripting
2023-07-27 14:15:00
wordfence
wordfence
5.4 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.0%
Related for WPVDB-ID:F138EAFB-7E9E-4885-B84F-737ADE0C1E9A