Lucene search
WpvulndbWPEX-ID:9E9B1D9E-1271-4C00-A621-EF2212136B26HistoryFeb 02, 2023 - 12:00 a.m.
Ocean Extra < 2.1.2 - Contributor+ Stored XSS
2023-02-0200:00:00
wpvulndb
67
ocean extra contributor+ stored xss
vulnerability
exploit
security
EPSS
0.001
Percentile
21.0%
The plugin does not escape the class attribute of its oceanwp_breadcrumb shortcode before outputting it back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
[oceanwp_breadcrumb class='" onmouseover=alert(/XSS/)//']Related
cve
cve
CVE-2023-23891
2023-04-06 14:15:07
cvelist
cvelist
wpvulndb
wpvulndb
Ocean Extra < 2.1.2 - Contributor+ Stored XSS
2023-02-02 00:00:00
prion
prion
Cross site scripting
2023-04-06 14:15:00
nvd
nvd
CVE-2023-23891
2023-04-06 14:15:07
wordfence
wordfence