Files
CVEs-PoC/2022/CVE-2022-0643.md
T
2024-06-18 02:51:15 +02:00

741 B

CVE-2022-0643

Description

The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

POC

Reference

Github

No PoCs found on GitHub currently.