Lucene search

K
wpvulndbWpvulndbWPVDB-ID:289B03EA-C234-4941-8B8C-A4AC650FE12C
HistoryOct 12, 2023 - 12:00 a.m.

Instagram for WordPress <= 2.1.6 - Contributor+ Stored XSS

2023-10-1200:00:00
wpscan.com
4
wordpress
plugin
contributor+
stored xss

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

18.6%

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

18.6%

Related for WPVDB-ID:289B03EA-C234-4941-8B8C-A4AC650FE12C