The ark-commenteditor WordPress... CVE-2021-4227

- AV AC AU C I A
发布： 2024-01-16
修订： 2024-11-21

The ark-commenteditor WordPress plugin through 2.15.6 does not properly sanitise or encode the comments when in Source editor, allowing attackers to inject an iFrame in the page and thus load arbitrary content from any page to the comment section

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有1条受影响产品信息