Lucene search

K
wpvulndbWpvulndbWPVDB-ID:E93E568D-C8A9-4876-BAAC-35549F6F0FAD
HistoryNov 23, 2023 - 12:00 a.m.

Ajax Domain Checker <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

2023-11-2300:00:00
wpscan.com
4
wordpress
cross-site scripting
input sanitization

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

Description The Ajax Domain Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

Related for WPVDB-ID:E93E568D-C8A9-4876-BAAC-35549F6F0FAD