two vulnerabilities which can be chained together to take you to the admin credentials

jewlofthelotus / SlickQuiz-WordPress

SlickQuiz is a plugin for displaying and managing pretty, dynamic quizzes. It uses the SlickQuiz jQuery plugin.

http://wordpress.org/extend/plugins/slickquiz

Other

18 stars 19 forks source link

two vulnerabilities which can be chained together to take you to the admin credentials #103

Open ppezier opened 5 years ago

ppezier commented 5 years ago

two vulnerabilities : CVE-2019-12517 (Unauthenticated Stored XSS) and CVE-2019-12516 (Authenticated SQL Injection) which can be chained together to take you from being an unauthenticated Wordpress visitor to the admin credentials

by Julien Ahrens