Lucene search
PRIOn knowledge basePRION:CVE-2023-4823HistoryOct 31, 2023 - 2:15 p.m.
Cross site scripting
2023-10-3114:15:00
PRIOn knowledge base
www.prio-n.com
5
vulnerability
wp meta and date remover
wordpress plugin
2.2.0
unsanitized user input
stored cross-site scripting
ajax endpoint
The WP Meta and Date Remover WordPress plugin before 2.2.0 provides an AJAX endpoint for configuring the plugin settings. This endpoint has no capability checks and does not sanitize the user input, which is then later output unescaped. Allowing any authenticated users, such as subscriber change them and perform Stored Cross-Site Scripting.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_meta_and_date_remover | lt | 2.2.0 |
Related
cve
cve
CVE-2023-4823
2023-10-31 14:15:12
wpvulndb
wpvulndb
WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS
2023-10-09 00:00:00
cvelist
cvelist
CVE-2023-4823 WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS
2023-10-31 13:54:42
nvd
nvd
CVE-2023-4823
2023-10-31 14:15:12
wpexploit
wpexploit
WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS
2023-10-09 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: vim-9.0.2120-1.fc37
2023-11-26 03:08:40
[SECURITY] Fedora 39 Update: vim-9.0.2120-1.fc39
2023-11-24 01:37:40
[SECURITY] Fedora 38 Update: vim-9.0.2120-1.fc38
2023-11-26 03:05:59
wordfence
wordfence