cve/CVE-2016-10736.md at 694ac234a19db48cd3b1f78eb5f461ab1f6c99f7

admin/cve

Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00

0xMarcio 48a00929ac Removed duplicates

2024-06-18 02:51:15 +02:00

749 B

Raw Blame History

CVE-2016-10736

Description

The "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS via the wp-admin/admin.php?page=dpsp-toolkit dpsp_message_class parameter.

POC

Reference

https://advisories.dxw.com/advisories/reflected-xss-in-social-pug-easy-social-share-buttons-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can/

Github

https://github.com/ARPSyndicate/cvemon

749 B Raw Blame History

CVE-2016-10736

Description

POC

Reference

Github

749 B

Raw Blame History