Lucene search
ABISHEIK MWPVDB-ID:C73818E5-0734-46C9-9703-D211B4F58664HistoryJun 28, 2021 - 12:00 a.m.
Bookshelf <= 2.0.4 - Authenticated Stored Cross-Site Scripting (XSS)
2021-06-2800:00:00
ABISHEIK M
wpscan.com
3
The plugin does not sanitise or escape its “Paypal email address” setting before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue
PoC
Add the following payload in the “Paypal email address” setting of the plugin (/wp-admin/admin.php?page=bookshelf-settings): ">
Related
cnvd
cnvd
WordPress Bookshelf plugin cross-site scripting vulnerability
2021-08-05 00:00:00
prion
prion
Cross site scripting
2021-08-02 11:15:00
patchstack
patchstack
wpexploit
wpexploit
Bookshelf <= 2.0.4 - Authenticated Stored Cross-Site Scripting (XSS)
2021-06-28 00:00:00
cve
cve
CVE-2021-24478
2021-08-02 11:15:00
mscve
mscve
Microsoft Office Remote Code Execution Vulnerability
2021-08-10 07:00:00
Related for WPVDB-ID:C73818E5-0734-46C9-9703-D211B4F58664