Files
CVEs-PoC/2022/CVE-2022-24585.md
T
2024-05-25 21:48:12 +02:00

706 B

CVE-2022-24585

Description

A stored cross-site scripting (XSS) vulnerability in the component /core/admin/comment.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the author parameter.

POC

Reference

No PoCs from references.

Github