WordPress Infinite Scroll - Ajax Load More < 6.2 - Contributor+ Stored XSS

2024-01-0500:00:00

wpscan.com

wordpress

infinite scroll

ajax load more

stored xss

security

cross-site scripting

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

Description The plugin does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks

CPENameOperatorVersion
eq6.2

CPE	Name	Operator	Version
		eq	6.2

References

patchstack.com/database/vulnerability/ajax-load-more/wordpress-ajax-load-more-plugin-6-1-0-1-cross-site-scripting-xss-vulnerability