cve/CVE-2018-5316.md at f0ac04d7677853df048666db730bdfce74d87780 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-28 01:04:30 +00:00

0xMarcio 48a00929ac Removed duplicates

2024-06-18 02:51:15 +02:00

683 B

Raw Blame History

CVE-2018-5316

Description

The "SagePay Server Gateway for WooCommerce" plugin before 1.0.9 for WordPress has XSS via the includes/pages/redirect.php page parameter.

POC

Reference

https://packetstormsecurity.com/files/145459/WordPress-Sagepay-Server-Gateway-For-WooCommerce-1.0.7-XSS.html

Github

https://github.com/ARPSyndicate/kenzer-templates