admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-06-19 17:30:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-6072.md
0xMarcio d6bcaa53f2 Update CVE sources 2024-07-25 21:25
2024-07-25 21:25:12 +00:00

794 B
Raw Blame History

CVE-2024-6072

Description

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

POC

Reference

Github

No PoCs found on GitHub currently.