mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-01 19:21:35 +02:00
874 B
874 B
CVE-2021-24127
Description
Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authenticated Stored Cross-Site Scripting (XSS), which could lead to privilege escalation.
POC
Reference
- https://wpscan.com/vulnerability/1fbd9f7a-6f99-45a2-9d57-01631a1f35d6
- https://wpscan.com/vulnerability/1fbd9f7a-6f99-45a2-9d57-01631a1f35d6
Github
No PoCs found on GitHub currently.