Lucene search
+L

3 matches found

wpexploit
wpexploit
added 2023/12/21 12:0 a.m.203 views

Easy Forms for Mailchimp < 6.9.0 - Admin+ Stored Cross-Site Scripting

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed 1 Create a new opt-in form 2 Edit the form, and add a "First name" field. 3 Update the form...

4.8CVSS4.8AI score0.00402EPSS
SaveExploits2
Rows per page
Query Builder