mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-12 05:11:38 +02:00
848 B
848 B
CVE-2021-25006
Description
The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue
POC
Reference
- https://wpscan.com/vulnerability/dbe2c6ca-d2f1-40a2-83d5-4623c22d4d61
- https://wpscan.com/vulnerability/dbe2c6ca-d2f1-40a2-83d5-4623c22d4d61
Github
No PoCs found on GitHub currently.