Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2023-4925
HistoryJan 15, 2024 - 4:15 p.m.

Cross site scripting

2024-01-1516:15:00
PRIOn knowledge base
www.prio-n.com
3
cross site scripting
mailchimp
wordpress
vulnerability
user privilege
admin
unfiltered html

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

CPENameOperatorVersion
easy_forms_for_mailchimple6.8.10

Related

nvd 1
osv 1
cve 1
wpvulndb 1
cvelist 1
wpexploit 1
nvd
nvd
CVE-2023-4925
2024-01-15 16:15:11
osv
osv
CVE-2023-4925
2024-01-15 16:15:11
cve
cve
CVE-2023-4925
2024-01-15 16:15:11
wpvulndb
wpvulndb
Easy Forms for Mailchimp < 6.9.0 - Admin+ Stored Cross-Site Scripting
2023-12-21 00:00:00
cvelist
cvelist
CVE-2023-4925 Easy Forms for Mailchimp <= 6.8.10 - Admin+ Stored Cross-Site Scripting
2024-01-15 15:10:43
wpexploit
wpexploit
Easy Forms for Mailchimp < 6.9.0 - Admin+ Stored Cross-Site Scripting
2023-12-21 00:00:00

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON
Related for PRION:CVE-2023-4925
nvd1osv1cve1wpvulndb1cvelist1wpexploit1