admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-11-28 18:48:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2021/CVE-2021-24305.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

865 B
Raw Blame History

CVE-2021-24305

Description

The Target First WordPress Plugin v2.0, also previously known as Watcheezy, suffers from a critical unauthenticated stored XSS vulnerability. An attacker could change the licence key value through a POST on any URL with the 'weeWzKey' parameter that will be save as the 'weeID option and is not sanitized.

POC

Reference

Github

No PoCs found on GitHub currently.