Stored XSS on Wordpress 5.3 via Title Post
High
W
WordPress
Submitted None
Actions:
Reported by
muhammaddaffa
Vulnerability Details
Technical details and impact analysis
I have identified a WordPress security vulnerability , a Stored XSS vulnerability that affects latest version of WordPress (5.3)
POC:
1) Login to wordpress website
2) Make a post with title payload xss like example <script>alert(document.domain);</script>
3) Publish then open the post, XSS Will trigger
## Impact
Can stealing cookie user
Report Details
Additional information and metadata
State
Closed
Substate
Not-Applicable
Submitted
Weakness
Cross-site Scripting (XSS) - Stored