Lucene search

K
wpvulndbWpvulndbWPVDB-ID:741D07D1-2476-430A-B82F-E1228A9343A4
HistoryJun 11, 2020 - 12:00 a.m.

WordPress < 5.4.2 - Authenticated XSS via Media Files

2020-06-1100:00:00
wpscan.com
17

Props to Luigi – (gubello.me) for discovering an XSS issue where authenticated users with upload permissions are able to add JavaScript to media files.