Lucene search

K
wpexploitWpvulndbWPEX-ID:8D0EB0B4-0CC0-44E5-B720-90B01DF3A6EE
HistoryJan 18, 2021 - 12:00 a.m.

WP Shieldon 1.6.3 - Unauthenticated Cross-Site Scripting (XSS)

2021-01-1800:00:00
wpvulndb
321

The WP Shieldon WordPress plugin, versions 1.6.3 and below, were vulnerable to Unauthenticated Reflected Cross-Site Scripting (XSS) when the CAPTCHA page is shown. This was due to $_SERVER[β€˜REQUEST_URI’] being echoed to a page without any encoding.

http://www.example.com/?<script>alert(1)</script>
Related for WPEX-ID:8D0EB0B4-0CC0-44E5-B720-90B01DF3A6EE