Lucene search
WpvulndbWPVDB-ID:407C62AF-8E2D-441D-8332-0AFAD5D07014HistoryApr 20, 2023 - 12:00 a.m.
CMS Tree Page View < 1.6.8 - Reflected XSS
2023-04-2000:00:00
wpscan.com
11
cms
tree
page view
reflected xss
cross-site scripting
high privilege users
admin
0.001 Low
EPSS
Percentile
49.8%
The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| cms-tree-page-view | lt | 1.6.8 |
Related
openvas
openvas
WordPress CMS Tree Page View Plugin < 1.6.8 XSS Vulnerability
2023-09-12 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2023-30868
2023-05-18 09:15:10
prion
prion
Cross site scripting
2023-05-18 09:15:00
cve
cve
CVE-2023-30868
2023-05-18 09:15:10
nuclei
nuclei
Tree Page View Plugin < 1.6.7 - Cross-Site Scripting
2023-10-17 07:20:28
zdt
zdt
Tree Page View Plugin 1.6.7 - Cross Site Scripting Vulnerability
2023-06-06 00:00:00
packetstorm
packetstorm
WordPress Tree Page View 1.6.7 Cross Site Scripting
2023-06-06 00:00:00
exploitdb
exploitdb
Tree Page View Plugin 1.6.7 - Cross Site Scripting (XSS)
2023-06-06 00:00:00
wordfence
wordfence