Lucene search
WpvulndbWPVDB-ID:3A865A4B-74F0-4924-9853-1033F0FA1BCFHistoryJul 22, 2022 - 12:00 a.m.
Simple Banner < 2.12.0 - Admin+ Stored Cross-Site Scripting
2022-07-2200:00:00
wpscan.com
30
banner plugin
version 2.12.0
stored cross-site scripting
admin privilege
unfiltered html
multisite setup
software
EPSS
0.001
Percentile
33.8%
The plugin does not sanitise and escape its settings pro_version_activation_code settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Related
cvelist
cvelist
CVE-2022-2515
2022-09-06 17:18:58
prion
prion
Cross site scripting
2022-09-06 18:15:00
nvd
nvd
CVE-2022-2515
2022-09-06 18:15:14
cve
cve
CVE-2022-2515
2022-09-06 18:15:14
patchstack
patchstack