Lucene search
WpvulndbWPVDB-ID:5A2C8576-9B1A-419A-B1CE-A12912B5F68AHistoryMay 17, 2023 - 12:00 a.m.
Waiting: One-click countdowns <= 0.6.2 - Subscriber+ Stored XSS
2023-05-1700:00:00
wpscan.com
4
plugin
xss
sanitisation
escaping
authorization
cross-site scripting
EPSS
0.001
Percentile
42.5%
The plugin does not sanitise and escape some parameters, and is missing proper authorisation, which could allow any authenticated users, such as subscriber to perform Cross-Site Scripting attacks
Related
cve
cve
CVE-2023-2757
2023-05-18 03:15:11
cvelist
cvelist
CVE-2023-2757
2023-05-18 02:04:29
prion
prion
Design/Logic Flaw
2023-05-18 03:15:00
nvd
nvd
CVE-2023-2757
2023-05-18 03:15:11
wordfence
wordfence