Lucene search

K
wpvulndbWpvulndbWPVDB-ID:562F66B4-948E-4B27-92B1-6FB6272F73F0
HistorySep 20, 2023 - 12:00 a.m.

Simple Download Counter < 1.6.1 - Contributor+ Stored XSS

2023-09-2000:00:00
wpscan.com
2
simple download counter
version 1.6.1
stored xss
contributor
cross-site scripting
high privilege users
plugin

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

21.7%

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

21.7%

Related for WPVDB-ID:562F66B4-948E-4B27-92B1-6FB6272F73F0