mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-28 03:02:23 +02:00
882 B
882 B
CVE-2021-24812
Description
The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues when an admin import a malicious CSV.
POC
Reference
- https://wpscan.com/vulnerability/6bc8fff1-ff10-4175-8a46-563f0f26f96a
- https://wpscan.com/vulnerability/6bc8fff1-ff10-4175-8a46-563f0f26f96a
Github
No PoCs found on GitHub currently.