WordPress treated Imgur as a trusted oEmbed provider and embedded its returned HTML without sanitization. Markup an attacker could place in Imgur's oEmbed response executed in the browser of anyone viewing a page where that Imgur URL was embedded. This vulnerability affects the following application versions: WordPress 3.9 WordPress 3.9.1... Weiterlesen: Stored Cross-Site Scripting via Imgur oEmbeds in WordPress
Intelligence View
⚡ tsecurity.de Intelligence
Stored Cross-Site Scripting via Imgur oEmbeds in WordPress
WordPress treated Imgur as a trusted oEmbed provider and embedded its returned HTML without sanitization. Markup an attacker could place in Imgur's oEmbed…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Intelligence Digest — free The top security news daily · unsubscribe anytime