Lucene search
+L

1 matches found

wpexploit
wpexploit
added 2021/08/10 12:00 a.m.567 views

Daily Prayer Time < 2021.08.10 - Authenticated Stored XSS

The plugin does not sanitise or escape some of its settings before outputting them in the page, leading to Authenticated Stored Cross-Site Scripting issues. Put the following payload in the Fajr, Sunrise, Zuhr, Asr, Maghrib and/or Isha field of the Language settings of the plugin...

5.4CVSS5.3AI score0.0062EPSS
SaveExploits2
Rows per page
Query Builder