mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-11 20:52:49 +02:00
898 B
898 B
CVE-2021-24372
Description
The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the $_SERVER['REQUEST_URI'] before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue.
POC
Reference
- https://wpscan.com/vulnerability/5340ae4e-95ba-4a69-beb1-3459cac17782
- https://wpscan.com/vulnerability/5340ae4e-95ba-4a69-beb1-3459cac17782
Github
No PoCs found on GitHub currently.