Lucene search

K
wpexploitIohexWPEX-ID:016453E3-803B-4A67-8EA7-2D228C2998D4
HistoryJun 16, 2022 - 12:00 a.m.

WP Paginate < 2.1.9 - Admin+ Stored Cross-Site Scripting

2022-06-1600:00:00
iohex
95

0.001 Low

EPSS

Percentile

25.0%

The plugin does not escape one of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when unfiltered_html is disallowed

Put the following payload on the Preset settings of the plugin: '+accesskey="X"+onclick="alert(1)"'

0.001 Low

EPSS

Percentile

25.0%

Related for WPEX-ID:016453E3-803B-4A67-8EA7-2D228C2998D4