CVE-2023-4284

Post Timeline < 2.2.6 - Reflected XSS

published September 4, 2023

CVSS
—
EPSS
1%
Percentile
54.8
In the wild
Unconfirmed
What it is

The Post Timeline WordPress plugin before 2.2.6 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00759 · 54.8th percentile
Published
2023-09-04T11:26Z
EPSS history
Timeline
  • 04 SEP 11:26Z
    Post Timeline < 2.2.6 - Reflected XSS
    cvelistv5