cve/2014/CVE-2014-3903.md
2024-05-26 14:27:05 +02:00

649 B

CVE-2014-3903

Description

Cross-site scripting (XSS) vulnerability in the Cakifo theme 1.x before 1.6.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via crafted Exif data.

POC

Reference

Github

No PoCs found on GitHub currently.