Lucene search
WpvulndbWPVDB-ID:0212183F-4A98-4DE8-841D-261C625692B1HistoryOct 02, 2023 - 12:00 a.m.
Email posts to subscribers <= 6.2 - Admin+ Stored XSS
2023-10-0200:00:00
wpscan.com
5
admin role
stored xss
multisite setup
email subscriptions
Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Related
cve
cve
CVE-2023-41736
2023-10-02 08:15:38
nvd
nvd
CVE-2023-41736
2023-10-02 08:15:38
prion
prion
Cross site scripting
2023-10-02 08:15:00
cvelist
cvelist
wordfence
wordfence
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
18.6%
Related for WPVDB-ID:0212183F-4A98-4DE8-841D-261C625692B1