CVEs-PoC/2022/CVE-2022-3209.md

CVE-2022-3209

Description

The soledad WordPress theme before 8.2.5 does not sanitise the {id,datafilter[type],...} parameters in its penci_more_slist_post_ajax AJAX action, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.

POC

Reference

• https://wpscan.com/vulnerability/7a244fb1-fa0b-4294-9b51-588bf5d673a2

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/a23au/awe-base-images
• https://github.com/stkcat/awe-base-images