Legull WordPress - Cross-Site Scripting
Legull WordPress plugin <= 1.2.2 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires victim to click malicious link.
PoC 已收录Legull
CVSS—