Post Sync Plugin <= 1.1 - Cross-Site Scripting
Post Sync WordPress plugin <= 1.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL.
Post SyncPoC 已收录
CVSS—