Lucene search
WpvulndbWPVDB-ID:8D0EB0B4-0CC0-44E5-B720-90B01DF3A6EEHistoryJan 18, 2021 - 12:00 a.m.
WP Shieldon 1.6.3 - Unauthenticated Cross-Site Scripting (XSS)
2021-01-1800:00:00
wpscan.com
7
The WP Shieldon WordPress plugin, versions 1.6.3 and below, were vulnerable to Unauthenticated Reflected Cross-Site Scripting (XSS) when the CAPTCHA page is shown. This was due to $_SERVER[‘REQUEST_URI’] being echoed to a page without any encoding.
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp-shieldon | eq | * |
Related
cve
cve
CVE-2021-24124
2021-03-18 15:15:00
prion
prion
Cross site scripting
2021-03-18 15:15:00
wpexploit
wpexploit
WP Shieldon 1.6.3 - Unauthenticated Cross-Site Scripting (XSS)
2021-01-18 00:00:00
Related for WPVDB-ID:8D0EB0B4-0CC0-44E5-B720-90B01DF3A6EE