CVE-2023-0152

MEDIO 5.4CVE-2023-0152 · Published 05/06/2023 · updated 17/06/2026

In breve

CVE-2023-0152 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda wp multi store locator (wpexperts).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.44%, superiore al 38.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
wp multi store locator wpexperts	`≤ 2.4`	No fix yet

Description

The WP Multi Store Locator WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

References

wpscan.com/vulnerability/8281fce2-6f24-4d3f-895f-4d8694806609 · Exploit

Altre vulnerabilità di wp multi store locator

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free