WordPress WP Symposium Pro 2021.10 跨站脚本

2021-12-17 15:36:43 浏览数 (2)

供应​​商主页:http://www.wpsymposiumpro.com/

软件链接:https://wordpress.org/plugins/wp-symposium-pro/

版本:2021.10

测试:Windows 10

Description:WP Symposium Pro 2021.10 版插件由于缺乏清理添加论坛专业及其“名称”标签而暴露于存储的跨站点脚本漏洞。

代码语言:javascript复制
POST /wordpress/wp-admin/admin.php?page=wps_pro_setup HTTP/1.1


wpspro_quick_start=forum&wps_admin_forum_add_name=&wps_admin_forum_add_description=test

0 人点赞