Lucene search

K
wpvulndbWpvulndbWPVDB-ID:F9685231-BCA9-44DA-9156-51978C5B582A
HistoryMay 16, 2023 - 12:00 a.m.

PixelYourSite < 9.6.2 - Admin+ Stored Cross-Site Scripting

2023-05-1600:00:00
wpscan.com
20
pixelyoursite
cross-site scripting
admin settings
multi-site installations
unfiltered html

EPSS

0.001

Percentile

45.1%

The plugin does not properly sanitize input and escape output in admin settings, leading to Stored Cross-Site Scripting vulnerabilities. This issue affects multi-site installations and installations with disabled unfiltered_html.

EPSS

0.001

Percentile

45.1%

Related for WPVDB-ID:F9685231-BCA9-44DA-9156-51978C5B582A