A user with the Author role or higher could upload a .txt file containing HTML markup and point the Interactivity API client-side router at it, for example through a link with a navigate directive. The router fetched the file and injected its markup into the current page as if it were an HTML page, regardless of the text/plain content type. Fixed... Weiterlesen: Stored Cross-Site Scripting in WordPress Interactivity Router via Upl…
Intelligence View
⚡ tsecurity.de Intelligence
Stored Cross-Site Scripting in WordPress Interactivity Router via Uploaded Text Files
A user with the Author role or higher could upload a .txt file containing HTML markup and point the Interactivity API client-side router at it, for example…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
30 sources
CVE-2024-13362 | Post SMTP Plugin on WordPress Parameter url cross site scripting
29 more sources
VVulDB Updates2 hours agoCVE-2024-13362 | Lightbox & Modal Popup Plugin on WordPress Parameter url cross site scripting VVulDB Updates2 hours agoCVE-2024-13362 | XT Floating Cart for WooCommerce Plugin on WordPress Parameter url cross site scripting VVulDB Updates2 hours agoCVE-2024-13362 | Internal Link Juicer Plugin on WordPress Parameter url cross site scripting VVulDB Updates2 hours agoCVE-2024-13362 | Knowledge Base Documentation & Wiki Plugin on WordPress Parameter url cross site scripting VVulDB Updates2 hours agoCVE-2024-13362 | Independent Analytics Plugin on WordPress Parameter url cross site scripting VVulDB Updates2 hours agoCVE-2024-13362 | Optimized Minify Plugin on WordPress Parameter url cross site scripting
+23
12 sources
CVE-2026-53317 | Linux Kernel up to 6.12.90/6.18.32/7.0.9 wifi denial of service
11 more sources
VVulDB Updates3 hours agoCVE-2026-53258 | Linux Kernel up to 6.18.35/7.0.12 wifi cfg80211_scan int_scan_req memory leak VVulDB Updates7 hours agoCVE-2026-43042 | Linux Kernel up to 6.19.11 mpls platform_label out-of-bounds VVulDB Updates6 hours agoCVE-2026-43185 | Linux Kernel up to 6.18.15/6.19.5 smb_direct_prepare_negotiation buffer overflow VVulDB Updates6 hours agoCVE-2026-43244 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 kcm_write_msgs null pointer dereference VVulDB Updates6 hours agoCVE-2026-43271 | Linux Kernel up to 6.6.127/6.12.74/6.18.15/6.19.5 process_metadata_update null pointer dereference VVulDB Updates6 hours agoCVE-2026-43250 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 ChipIdea UDC Driver _ep_nuke memory corruption
+5
8 sources
GitHub - HappyHackingSpace/claude-code-backdoor-check: Read-only scanner for the backdoored Claude Code 2.1.313 extension (Cursor marketplace, Oct 2026): SSH key, persistence, reverse tunnel. macOS + Linux.
7 more sources
IIT Security News2 hours agoHackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor GGBHackers Security3 hours agoHackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor DDEV Community3 hours agoClaude Code for VS Code 2.1.313 backdoor: how to check your machine and clean up GGoogle Alert3 hours agoClaude-Code-Erweiterung im Cursor-Marktplatz mit Malware infiziert | heise online KKitPloit5 hours agoclaude-code-backdoor-check CCyber Security News5 hours agoMicrosoft Warns of Trojanized Claude Code Extension Planting Persistent SSH Backdoor
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4307794/secure-programming/stored-cross-site-scripting-in-wordpress-interactivity-router-via-uploaded-text-files/