Lucene search
WpvulndbWPVDB-ID:E65A1A7C-12CE-47FE-8D58-F2CC9AD416EEHistorySep 29, 2023 - 12:00 a.m.
HollerBox < 2.3.3 - Admin+ Stored XSS
2023-09-2900:00:00
wpscan.com
4
hollerbox
stored xss
admin role
unfiltered html
multisite setup
Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Related
cvelist
cvelist
prion
prion
Cross site scripting
2023-09-29 14:15:00
nvd
nvd
CVE-2023-41657
2023-09-29 14:15:10
vulnrichment
vulnrichment
cve
cve
CVE-2023-41657
2023-09-29 14:15:10
wordfence
wordfence
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
18.6%
Related for WPVDB-ID:E65A1A7C-12CE-47FE-8D58-F2CC9AD416EE