Lucene search
Lana CodesWPEX-ID:009CA72E-E8FA-4FDC-AB2D-4210F8F4710FHistoryJan 10, 2023 - 12:00 a.m.
Page View Count < 2.6.1 - Contributor+ Stored XSS
2023-01-1000:00:00
Lana Codes
63
page view count
stored xss
additional css
gutenberg block
pvc settings
EPSS
0.001
Percentile
25.5%
The plugin does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Exploit Additional CSS class(es) for "Page Views" Gutenberg block: " onmouseover="alert(1)" style="background:red;"
Note: “Manual Show” must be enabled on the PVC Settings tab in the block.Related
cve
cve
CVE-2023-0095
2023-02-06 20:15:12
wpvulndb
wpvulndb
Page View Count < 2.6.1 - Contributor+ Stored XSS
2023-01-10 00:00:00
nvd
nvd
CVE-2023-0095
2023-02-06 20:15:12
prion
prion
Cross site scripting
2023-02-06 20:15:00
cvelist
cvelist
CVE-2023-0095 Page View Count < 2.6.1 - Contributor+ Stored XSS
2023-02-06 19:59:23