Lucene search
WpvulndbWPVDB-ID:50A13D41-3E1A-4957-81EB-EC5E95859BB2HistoryFeb 12, 2024 - 12:00 a.m.
SiteOrigin Widgets Bundle < 1.58.3 - Contributor+ Stored Cross-Site Scripting
2024-02-1200:00:00
wpscan.com
3
siteorigin widgets bundle
vulnerability
stored cross-site scripting
code editor
input sanitization
output escaping
authenticated attackers
contributor access
Description The plugin is vulnerable to Stored Cross-Site Scripting via the code editor due to insufficient input sanitization and output escaping, allowing authenticated attackers, with contributor access or higher, to perform Stored XSS attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 1.58.3 |
Related
cvelist
cvelist
CVE-2024-1070
2024-02-20 18:56:38
prion
prion
Cross site scripting
2024-02-29 01:43:00
nvd
nvd
CVE-2024-1070
2024-02-29 01:43:39
cve
cve
CVE-2024-1070
2024-02-29 01:43:39
wordfence
wordfence
5.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.5%
Related for WPVDB-ID:50A13D41-3E1A-4957-81EB-EC5E95859BB2