cve/2016/CVE-2016-10957.md

CVE-2016-10957

Description

The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parameter.

POC

Reference

• https://wpvulndb.com/vulnerabilities/8607
• https://www.saotn.org/wordpress-advisory-akal-theme-xss-vulnerability/

Github

• https://github.com/ARPSyndicate/cvemon