SeedProd before 6.18.4 lets a user with the edit_others_posts capability save arbitrary landing-page HTML without checking unfiltered_html. Because the saved markup is post-processed to turn a placeholder token into a real script tag, an Editor who is not allowed to post unfiltered HTML can store JavaScript that then runs for every visitor of the... Weiterlesen
Intelligence View
Authenticated (Editor+) Stored Cross-Site Scripting in SeedProd Landing Pages
SeedProd before 6.18.4 lets a user with the edit_others_posts capability save arbitrary landing-page HTML without checking unfiltered_html. Because the saved markup is post-processed to turn a placeholder token into a real script tag, an…
SOCIAL SHARE CARD GENERATOR