mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-30 13:19:29 +02:00
917 B
917 B
CVE-2021-24678
Description
The CM Tooltip Glossary WordPress plugin before 3.9.21 does not escape some glossary_tooltip shortcode attributes, which could allow users a role as low as Contributor to perform Stored Cross-Site Scripting attacks
POC
Reference
- https://wpscan.com/vulnerability/b83880f7-8614-4409-9305-d059b5df15dd
- https://wpscan.com/vulnerability/b83880f7-8614-4409-9305-d059b5df15dd
Github
No PoCs found on GitHub currently.