mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-03 08:48:00 +02:00
860 B
860 B
CVE-2021-24888
Description
The ImageBoss WordPress plugin before 3.0.6 does not sanitise and escape its Source Name setting, which could allow high privilege users to perform Cross-Site Scripting attacks
POC
Reference
- https://wpscan.com/vulnerability/19bffa71-705c-42fc-b2ca-bf62fabb70a0
- https://wpscan.com/vulnerability/19bffa71-705c-42fc-b2ca-bf62fabb70a0
Github
No PoCs found on GitHub currently.