Lucene search
+L

1 matches found

wpexploit
wpexploit
added 2024/06/07 12:00 a.m.375 views

Pagerank Tools <= 1.1.5 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin https://example.com/wp-admin/tools.php?page=pagepageranks&url="alert333...

8.7AI score0.00395EPSS
SaveExploits4
Rows per page
Query Builder