Lucene search
Apple502jWPVDB-ID:E6602369-87F4-4454-8298-89CC69F8375CHistoryJul 19, 2021 - 12:00 a.m.
Wonder PDF Embed < 1.7 - Contributor+ Stored XSS
2021-07-1900:00:00
apple502j
wpscan.com
10
pdf embed contributor xss
.
EPSS
0.001
Percentile
24.8%
The plugin does not escape parameters of its wonderplugin_pdf shortcode, which could allow users with a role as low as Contributor to perform Stored XSS attacks.
PoC
[wonderplugin_pdf src=“a” onload=“alert(1)”]
Related
prion
prion
Cross site scripting
2021-08-16 11:15:00
cve
cve
CVE-2021-24541
2021-08-16 11:15:09
wpexploit
wpexploit
Wonder PDF Embed < 1.7 - Contributor+ Stored XSS
2021-07-19 00:00:00
nvd
nvd
CVE-2021-24541
2021-08-16 11:15:09
patchstack
patchstack
cvelist
cvelist
CVE-2021-24541 Wonder PDF Embed < 1.7 - Contributor+ Stored XSS
2021-08-16 10:48:32