Exploit for Cross-site Scripting in Advancedcustomfields Advanced_Custom_Fields

CVE-2023-30777 Proof of Concept PoC URL generator for...

CVE-2023-30777

The Advanced Custom Fields and Advanced Custom Fields Pro WordPress plugins (versions prior to 6.1.6 ) are vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping of the post_status parameter. An attacker can inject arbitrary scri...

CVE-2023-30777

creationtimestamp| type| source ---|---|--- 2023-05-06 07:50:16+00:00| seen| https://t.me/thehackernews/3323 2023-05-06 09:17:35+00:00| published-proof-of-concept| Telegram/5J0K3ktTRnE5OXtmHSZQB0ByP7s3NltK4ljZroPrT30A 2023-05-06 09:27:42+00:00| seen| https://t.me/KomunitiSiber/162 2023-05-07...

New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cyberattacks

Users of Advanced Custom Fields plugin for WordPress are being urged to update version 6.1.6 following the discovery of a security flaw. The issue, assigned the identifier CVE-2023-30777, relates to a case of reflected cross-site scripting XSS that could be abused to inject arbitrary executable...

WordPress Advanced Custom Fields Plugin 5.8.10-5.12.5 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Custom Fields Type Plugin Vulnerable versions 5.8.10-5.12.5 Fixed in 5.12.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30777 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2970573ffd97 Credits Raf...

WordPress Advanced Custom Fields PRO Plugin <= 6.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Custom Fields PRO Type Plugin Vulnerable versions = 6.1.5 Fixed in 6.1.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30777 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 007d3de805e3 Credits Rafie...