cve/2018/CVE-2018-11709.md
2024-06-18 02:51:15 +02:00

701 B

CVE-2018-11709

Description

wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting (XSS) via the URI.

POC

Reference

Github