Lucene search
Lana CodesWPEX-ID:57E528CE-EC8C-4734-8903-926BE36F91E7HistoryFeb 02, 2023 - 12:00 a.m.
Show-Hide / Collapse-Expand <= 1.2.5 - Contributor+ Stored XSS via Shortcode
2023-02-0200:00:00
Lana Codes
126
stored xss shortcode exploit custom_class mouseover alert
0.001 Low
EPSS
Percentile
23.3%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
Exploit shortcode: [bg_collapse custom_class="' onmouseover='alert(1)'"]Related
nvd
nvd
CVE-2022-4829
2023-02-27 16:15:11
cve
cve
CVE-2022-4829
2023-02-27 16:15:11
wpvulndb
wpvulndb
Show-Hide / Collapse-Expand <= 1.2.5 - Contributor+ Stored XSS via Shortcode
2023-02-02 00:00:00
prion
prion
Cross site scripting
2023-02-27 16:15:00
cvelist
cvelist