Lucene search

K
wpvulndbZhongFu Su(JrXnm) of Wuhan UniversityWPVDB-ID:2EE6F1D8-3803-42F6-9193-3DD8F416B558
HistoryMay 24, 2022 - 12:00 a.m.

Ocean Extra < 1.9.5 - Reflected Cross-Site Scripting

2022-05-2400:00:00
ZhongFu Su(JrXnm) of Wuhan University
wpscan.com
19
ocean extra plugin
reflected cross-site scripting
oceanwp theme

EPSS

0.001

Percentile

43.5%

The plugin does not escape generated links which are then used when the OceanWP theme is active, leading to a Reflected Cross-Site Scripting issue

PoC

https://example.com/wp-admin/?step=demo&amp;page;=owp_setup&amp;a;">

EPSS

0.001

Percentile

43.5%

Related for WPVDB-ID:2EE6F1D8-3803-42F6-9193-3DD8F416B558