### [CVE-2015-5622](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5622)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Cross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the Author or Contributor role to place a crafted shortcode inside an HTML element, related to wp-includes/kses.php and wp-includes/shortcodes.php.

### POC

#### Reference
- https://wpvulndb.com/vulnerabilities/8111

#### Github
- https://github.com/AGENTGOOBER/CyberSecurityWeek7
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Afetter618/WordPress-PenTest
- https://github.com/DannyLi804/CodePath-Pentesting
- https://github.com/GianfrancoLeto/CodepathWeek7
- https://github.com/HarryMartin001/WordPress-vs.-Kali-Week-7-8
- https://github.com/Japluas93/WordPress-Exploits-Project
- https://github.com/Laugslander/codepath-cybersecurity-week-7
- https://github.com/MXia000/WordPress_Pentesting
- https://github.com/SLyubar/codepath_Unit8
- https://github.com/SofCora/pentesting_project_sofcora
- https://github.com/XiaoyanZhang0999/WordPress_presenting
- https://github.com/ahmedj98/Pentesting-Unit-7
- https://github.com/alexanderkoz/Web-Security-Week-7-Project-WordPress-vs.-Kali
- https://github.com/and-aleksandrov/wordpress
- https://github.com/baronanriel/codepath_Hw7
- https://github.com/beelzebielsk/csc59938-week-7
- https://github.com/bryanvnguyen/WordPress-PT
- https://github.com/choyuansu/Week-7-Project
- https://github.com/christiancastro1/Codepath-Week-7-8-Assignement
- https://github.com/dinotrooper/codepath_week7_8
- https://github.com/drsh0x2/WebSec-Week7
- https://github.com/emilylaih/Weeks-7-8-Project-WordPress-vs.-Kali
- https://github.com/greenteas/week7-wp
- https://github.com/hiraali34/codepath_homework
- https://github.com/j5inc/week7
- https://github.com/jas5mg/Code-Path-Week7
- https://github.com/jguerrero12/WordPress-Pentesting
- https://github.com/jlangdev/WPvsKali
- https://github.com/kennyhk418/Codepath_project7
- https://github.com/kiankris/CodePath-Project7
- https://github.com/krs2070/WordPressVsKaliProject
- https://github.com/krushang598/Cybersecurity-Week-7-and-8
- https://github.com/lihaojin/WordPress-Pentesting
- https://github.com/lqiu1127/Codepath-wordpress-exploits
- https://github.com/mattdegroff/CodePath_Wk7
- https://github.com/mmehrayin/cybersecurity-week7
- https://github.com/natlarks/Week7-WordPressPentesting
- https://github.com/notmike/WordPress-Pentesting
- https://github.com/syang1216/Wordpress
- https://github.com/teimilola/RecreatingWordPressExploits
- https://github.com/vkril/Cybersecurity-Week-7-Project-WordPress-vs.-Kali
- https://github.com/yud121212/WordPress-PT
- https://github.com/zakia00/Week7Lab
- https://github.com/zjasonshen/CodepathWebSecurityWeek7