cve/2018/CVE-2018-11709.md
2024-06-09 00:33:16 +00:00

746 B

CVE-2018-11709

Description

wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting (XSS) via the URI.

POC

Reference

Github