Lucene search
WpvulndbWPVDB-ID:0971F5C1-D274-497F-958E-60D4D3A40081HistoryMay 04, 2020 - 12:00 a.m.
wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via s Parameter
2020-05-0400:00:00
wpscan.com
7
EPSS
0.001
Percentile
24.8%
The plugin did not escape, validate or escape the ‘s’ GET parameter before outputting back in the page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in admin
PoC
https://example.com/wp-admin/admin.php?page=wpforo-phrases&s;=">
Related
wpexploit
wpexploit
wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via s Parameter
2020-05-04 00:00:00
cvelist
cvelist
CVE-2019-19110
2020-06-15 13:10:47
prion
prion
Design/Logic Flaw
2020-06-15 14:15:00
nvd
nvd
CVE-2019-19110
2020-06-15 14:15:09
cve
cve
CVE-2019-19110
2020-06-15 14:15:09