mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-09 15:15:46 +02:00
850 B
850 B
CVE-2015-20106
Description
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.
POC
Reference
- https://wpscan.com/vulnerability/907792c4-3384-4351-bb75-0ad10f65fbe1
- https://wpscan.com/vulnerability/907792c4-3384-4351-bb75-0ad10f65fbe1