Lucene search
GennadyWPEX-ID:79CE7097-C179-4EF3-B2C2-E8C75131B244HistoryAug 17, 2017 - 12:00 a.m.
Embed Images in Comments <= 0.5 - Unauthenticated Stored XSS
2017-08-1700:00:00
Gennady
6
0.001 Low
EPSS
Percentile
34.0%
Unescaped src and href attribute replacements allows breaking out of the generated replacement tags.
A comment containing the following "image" http://codeseekah.com/1.jpg"onload="alert(1)".jpg will generate an alert box.Related
cve
cve
CVE-2017-18561
2019-08-21 19:15:12
nvd
nvd
CVE-2017-18561
2019-08-21 19:15:12
prion
prion
Cross site scripting
2019-08-21 19:15:00
wpvulndb
wpvulndb
Embed Images in Comments <= 0.5 - Unauthenticated Stored XSS
2017-08-17 00:00:00
cvelist
cvelist
CVE-2017-18561
2019-08-21 18:07:02