mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-29 09:41:05 +00:00
860 B
860 B
CVE-2022-0702
Description
The Petfinder Listings WordPress plugin through 1.0.18 does not escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
POC
Reference
- https://wpscan.com/vulnerability/bf6f897b-af65-4122-802c-ae6d4f2346f9
- https://wpscan.com/vulnerability/bf6f897b-af65-4122-802c-ae6d4f2346f9
Github
No PoCs found on GitHub currently.