cve/2015/CVE-2015-5622.md

CVE-2015-5622

Description

Cross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the Author or Contributor role to place a crafted shortcode inside an HTML element, related to wp-includes/kses.php and wp-includes/shortcodes.php.

POC

Reference

• https://wpvulndb.com/vulnerabilities/8111

Github

• https://github.com/AGENTGOOBER/CyberSecurityWeek7
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Afetter618/WordPress-PenTest
• https://github.com/DannyLi804/CodePath-Pentesting
• https://github.com/GianfrancoLeto/CodepathWeek7
• https://github.com/HarryMartin001/WordPress-vs.-Kali-Week-7-8
• https://github.com/Japluas93/WordPress-Exploits-Project
• https://github.com/Laugslander/codepath-cybersecurity-week-7
• https://github.com/MXia000/WordPress_Pentesting
• https://github.com/SLyubar/codepath_Unit8
• https://github.com/SofCora/pentesting_project_sofcora
• https://github.com/XiaoyanZhang0999/WordPress_presenting
• https://github.com/ahmedj98/Pentesting-Unit-7
• https://github.com/alexanderkoz/Web-Security-Week-7-Project-WordPress-vs.-Kali
• https://github.com/and-aleksandrov/wordpress
• https://github.com/baronanriel/codepath_Hw7
• https://github.com/beelzebielsk/csc59938-week-7
• https://github.com/bryanvnguyen/WordPress-PT
• https://github.com/choyuansu/Week-7-Project
• https://github.com/christiancastro1/Codepath-Week-7-8-Assignement
• https://github.com/dinotrooper/codepath_week7_8
• https://github.com/drsh0x2/WebSec-Week7
• https://github.com/emilylaih/Weeks-7-8-Project-WordPress-vs.-Kali
• https://github.com/greenteas/week7-wp
• https://github.com/hiraali34/codepath_homework
• https://github.com/j5inc/week7
• https://github.com/jas5mg/Code-Path-Week7
• https://github.com/jguerrero12/WordPress-Pentesting
• https://github.com/jlangdev/WPvsKali
• https://github.com/kennyhk418/Codepath_project7
• https://github.com/kiankris/CodePath-Project7
• https://github.com/krs2070/WordPressVsKaliProject
• https://github.com/krushang598/Cybersecurity-Week-7-and-8
• https://github.com/lihaojin/WordPress-Pentesting
• https://github.com/lqiu1127/Codepath-wordpress-exploits
• https://github.com/mattdegroff/CodePath_Wk7
• https://github.com/mmehrayin/cybersecurity-week7
• https://github.com/natlarks/Week7-WordPressPentesting
• https://github.com/notmike/WordPress-Pentesting
• https://github.com/syang1216/Wordpress
• https://github.com/teimilola/RecreatingWordPressExploits
• https://github.com/vkril/Cybersecurity-Week-7-Project-WordPress-vs.-Kali
• https://github.com/yud121212/WordPress-PT
• https://github.com/zakia00/Week7Lab
• https://github.com/zjasonshen/CodepathWebSecurityWeek7