CVE-2016-1000127

The CVE-2016-1000127 entry concerns the WordPress plugin ajax-random-post, affected at version 2.00 (≤2.00). The connected nuclei template confirms a reflected Cross-Site Scripting vulnerability in the plugin’s handling of the AJAX endpoint, enabling injection of arbitrary JavaScript executed in ...