Lucene search
+L

1 matches found

wpexploit
wpexploit
•added 2021/06/02 12:00 a.m.•642 views

GetPaid < 2.3.4 - Authenticated Stored XSS

In the plugin, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly. So it was possible to inject malicious content such as img tags, leading to a Stored Cross-Site Scripting issue which is...

5.4CVSS0.00624EPSS
SaveExploits2
Rows per page
Query Builder