Lucene search
+L

3 matches found

wpexploit
wpexploit
added 2022/01/10 12:0 a.m.113 views

Cluevo < 1.8.1 - Admin+ Stored Cross Site Scripting

The plugin does not sanitise and escape Course's module, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed On the Learning Management page /wp-admin/admin.php?page=cluevo-lms, click Add Course, then put the followi...

4.8CVSS0.00598EPSS
SaveExploits2
Rows per page
Query Builder