{"id":"CVE-2023-0442","aliases":["EUVD-2023-12496","GHSA-545v-3hf5-cppv"],"status":"published","title":"Loan Comparison \u003c 1.5.2 - Reflected XSS via shortcode","description":"The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query parameters before outputting them back in a page/post via an embedded shortcode, which could allow an attacker to inject javascript into into the site via a crafted URL.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00486,"percentile":0.42162,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2023-02-21T08:51:06Z","modified":"2026-06-17T05:25:33Z","products":[{"vendor":"aerin","product":"loan comparison"},{"vendor":"loan_comparison_project","product":"loan_comparison"},{"vendor":"unknown","product":"loan comparison"}],"references":[{"url":"https://wpscan.com/vulnerability/34d95d88-4114-4597-b4db-e9f5ef80d322","tags":["exploit","vdb-entry","technical-description","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0442"},{"url":"https://github.com/advisories/GHSA-545v-3hf5-cppv"}],"sources":{"cve":[{"id":"CVE-2023-0442","title":"Loan Comparison \u003c 1.5.2 - Reflected XSS via shortcode","description":"The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query parameters before outputting them back in a page/post via an embedded shortcode, which could allow an attacker to inject javascript into into the site via a crafted URL.","status":"published","published":"2023-02-21T08:51:06.188Z","modified":"2025-03-12T13:27:36.989Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:35:35.256261Z"}],"euvd":[{"id":"EUVD-2023-12496","description":"The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query parameters before outputting them back in a page/post via an embedded shortcode, which could allow an attacker to inject javascript into into the site via a crafted URL.","status":"published","published":"2023-02-21T08:51:06Z","modified":"2025-03-12T13:27:36Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:53:06.845495Z"}],"ghsa":[{"id":"GHSA-545v-3hf5-cppv","title":"The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query...","description":"The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query parameters before outputting them back in a page/post via an embedded shortcode, which could allow an attacker to inject javascript into into the site via a crafted URL.","status":"published","published":"2023-02-21T09:30:20Z","modified":"2023-03-07T05:07:18Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:54:16.644116Z"}],"nvd":[{"id":"CVE-2023-0442","description":"The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query parameters before outputting them back in a page/post via an embedded shortcode, which could allow an attacker to inject javascript into into the site via a crafted URL.","status":"published","published":"2023-02-21T09:15:12.963Z","modified":"2026-06-17T05:25:33.683Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:07:47.623983Z"}]}}