Lucene search
PRIOn knowledge basePRION:CVE-2023-5205HistoryOct 21, 2023 - 8:15 a.m.
Cross site scripting
2023-10-2108:15:00
PRIOn knowledge base
www.prio-n.com
1
wordpress
plugin vulnerability
stored cross-site scripting
input sanitization
output escaping
authenticated attackers
The Add Custom Body Class plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘add_custom_body_class’ value in versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
| CPE | Name | Operator | Version |
|---|---|---|---|
| add_custom_body_class | le | 1.4.1 |
Related
cvelist
cvelist
CVE-2023-5205
2023-10-21 07:33:24
cve
cve
CVE-2023-5205
2023-10-21 08:15:09
nvd
nvd
CVE-2023-5205
2023-10-21 08:15:09
wpvulndb
wpvulndb
Add Custom Body Class <= 1.4.1 - Contributor+ Stored Cross-Site Scripting
2023-10-27 00:00:00
wordfence
wordfence