Lucene search

K
wpvulndbApple502jWPVDB-ID:59589E74-F901-4F4D-81DE-26AD19D1B7FD
HistorySep 06, 2021 - 12:00 a.m.

Better Find and Replace < 1.2.9 - Reflected Cross-Site Scripting

2021-09-0600:00:00
apple502j
wpscan.com
5
plugin
vulnerability
cross-site scripting
reflected
parameter
page
issue
poc
wordpress

EPSS

0.001

Percentile

43.2%

The plugin does not escape the ‘s’ GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue

PoC

https://example.com/wp-admin/admin.php?page=cs-all-masking-rules&amp;s;=

EPSS

0.001

Percentile

43.2%

Related for WPVDB-ID:59589E74-F901-4F4D-81DE-26AD19D1B7FD