Lucene search

K
wpvulndbWpvulndbWPVDB-ID:FD0E7294-DF5F-4EE8-BE61-0B8C6364912D
HistoryOct 30, 2022 - 12:00 a.m.

Soledad < 8.2.6 - Subscriber+ Cross-Site Scripting

2022-10-3000:00:00
wpscan.com
16
soledad
8.2.6
cross-site scripting
vulnerability
subscriber
software

EPSS

0.001

Percentile

22.7%

The plugin does not sanitise and escape a parameter, which could allow users with a role as low as subscriber to perform Cross-Site Scripting attacks

EPSS

0.001

Percentile

22.7%

Related for WPVDB-ID:FD0E7294-DF5F-4EE8-BE61-0B8C6364912D