mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-06 02:31:38 +00:00
835 B
835 B
CVE-2022-1512
Description
The ScrollReveal.js Effects WordPress plugin through 1.2 does not sanitise and escape its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
POC
Reference
- https://packetstormsecurity.com/files/166820/
- https://wpscan.com/vulnerability/a754a516-07fc-44f1-9c34-31e963460301