CVEs-PoC/2019/CVE-2019-9911.md

CVE-2019-9911

Description

The social-networks-auto-poster-facebook-twitter-g plugin before 4.2.8 for WordPress has wp-admin/admin.php?page=nxssnap-reposter&action=edit item XSS.

POC

Reference

• https://lists.openwall.net/full-disclosure/2019/02/05/12
• https://security-consulting.icu/blog/2019/02/wordpress-social-networks-auto-poster-xss/

Github

• https://github.com/20142995/nuclei-templates