WordPress Vulnerabilities
WordPress < 5.8.3 - Author+ Stored XSS via Post Slugs
Description
Low-privileged authenticated users (like author) in WordPress core are able to execute JavaScript/perform stored XSS attack via post slugs, which can affect high-privileged users.
Affects WordPress
References
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Karim El Ouerghemmi and Simon Scannell of SonarSource
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2022-01-06 (about 4 years ago)
Added
2022-01-06 (about 4 years ago)
Last Updated
2022-04-13 (about 3 years ago)