CVEs-PoC/2017/CVE-2017-12068.md

CVE-2017-12068

Description

The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an el_admin_categories delete_bulk action.

POC

Reference

• https://github.com/kevins1022/cve/blob/master/wordpress-event-list.md
• https://github.com/kevins1022/cve/blob/master/wordpress-event-list.md

Github

• https://github.com/ning1022/cve