Lucene search

K
wpexploitEthicalhack3rWPEX-ID:09329E59-1871-4EB7-B6EA-FD187CD8DB23
HistoryJan 06, 2016 - 12:00 a.m.

WordPress 3.7-4.4 - Authenticated Cross-Site Scripting (XSS)

2016-01-0600:00:00
ethicalhack3r
23

0.011 Low

EPSS

Percentile

84.8%

http://www.example.com/wp-admin/customize.php?theme=<svg onload=alert(1)> (source: https://twitter.com/brutelogic/status/685105483397619713)