Lucene search
ABISHEIK MWPEX-ID:C73818E5-0734-46C9-9703-D211B4F58664HistoryJun 28, 2021 - 12:00 a.m.
Bookshelf <= 2.0.4 - Authenticated Stored Cross-Site Scripting (XSS)
2021-06-2800:00:00
ABISHEIK M
51
The plugin does not sanitise or escape its “Paypal email address” setting before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue
Add the following payload in the "Paypal email address" setting of the plugin (/wp-admin/admin.php?page=bookshelf-settings): "><script>alert(/XSS/)</script>
Related
cnvd
cnvd
WordPress Bookshelf plugin cross-site scripting vulnerability
2021-08-05 00:00:00
prion
prion
Cross site scripting
2021-08-02 11:15:00
patchstack
patchstack
wpvulndb
wpvulndb
Bookshelf <= 2.0.4 - Authenticated Stored Cross-Site Scripting (XSS)
2021-06-28 00:00:00
cve
cve
CVE-2021-24478
2021-08-02 11:15:00
mscve
mscve
Microsoft Office Remote Code Execution Vulnerability
2021-08-10 07:00:00
Related for WPEX-ID:C73818E5-0734-46C9-9703-D211B4F58664