Lucene search
WpvulndbWPVDB-ID:284D17D5-E705-473B-828D-D3941D021DC4HistoryOct 17, 2023 - 12:00 a.m.
Social Feed <= 2.2.0 - Reflected XSS
2023-10-1700:00:00
wpscan.com
3
plugin
vulnerability
xss
privilege escalation
Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Related
cvelist
cvelist
prion
prion
Cross site scripting
2023-10-17 11:15:00
cve
cve
CVE-2023-45003
2023-10-17 11:15:10
vulnrichment
vulnrichment
nvd
nvd
CVE-2023-45003
2023-10-17 11:15:10
wordfence
wordfence
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
20.2%
Related for WPVDB-ID:284D17D5-E705-473B-828D-D3941D021DC4