Lucene search
Niraj MahajanWPEX-ID:16FC08EC-8476-4F3C-93EA-6A51ED880DD5HistoryJun 06, 2022 - 12:00 a.m.
WordPress Security < 4.2.1 - Admin+ Stored Cross-Site Scripting
2022-06-0600:00:00
Niraj Mahajan
96
wordpress
security
admin
stored cross-site scripting
EPSS
0.001
Percentile
24.8%
The plugin does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup)
Put the following payload in the "Advanced Blocking" tab > "Block HTTP Referer's" section > "Add Referer" field: "><img src=x onerror=alert(/XSS/)>Related
prion
prion
Cross site scripting
2022-06-27 09:15:00
wpvulndb
wpvulndb
WordPress Security < 4.2.1 - Admin+ Stored Cross-Site Scripting
2022-06-06 00:00:00
nvd
nvd
CVE-2022-1028
2022-06-27 09:15:08
cve
cve
CVE-2022-1028
2022-06-27 09:15:08
cvelist
cvelist
patchstack
patchstack
cnvd
cnvd
WordPress Security plugin跨站脚本漏洞
2022-06-30 00:00:00