CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Noor-E-Alam Amazing Hover Effects allows Stored XSS.This issue affects Amazing Hover Effects: from n/a through 2.4.9.
Explanation of Vulnerability in Simple Terms
Amazing Hover Effects contains a stored cross-site scripting (XSS) vulnerability that allows authenticated users to inject malicious scripts. When a victim with sufficient privileges views the affected content, the injected code executes in their browser. This can lead to session hijacking, credential theft, or unauthorized actions performed on behalf of the victim.
What an attacker can do
Inject malicious JavaScript that executes when other users view the affected content.
Potential impact on your site
Attackers with contributor or editor access can compromise admin sessions or steal sensitive data from site visitors.
Conditions required to exploit
Attacker must have low-level authenticated access and the victim must view a page containing the injected payload.
Key dates
External resources
Related vulnerabilities
