CVEs-PoC/2018/CVE-2018-11709.md

CVE-2018-11709

Description

wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting (XSS) via the URI.

POC

Reference

• https://wpvulndb.com/vulnerabilities/9090

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Michael-Meade/snackhack2