Aller au contenu
Se connecter
Non notée

CVE-2023-0165 The Cost Calculator WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before…

Description

The Cost Calculator WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cost Calculator 1.8 premières → 1.8 Pas de correctif indiqué

Autres CVE de Cost Calculator

Les 3 CVE de Cost Calculator →
CVE-2021-24821 The Cost Calculator WordPress plugin before 1.6 allows users with a role as low as Contributor to perform Stored… Non notée CVE-2021-24820 The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and… Non notée
Suivre cette CVE