cve/2017/CVE-2017-18010.md

CVE-2017-18010

Description

The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-form_egoi.php url parameter.

POC

Reference

• https://packetstormsecurity.com/files/145217/WordPress-Smart-Marketing-SMS-And-Newsletters-Forms-1.1.1-XSS.html
• https://wpvulndb.com/vulnerabilities/8974

Github

• https://github.com/ARPSyndicate/cvemon