Simple Certain Time to Show Content WordPress plugin < 1.3.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute arbitrary scripts in the context of high privilege users such as admin, exploit requires attacker to craft a malicious URL.
登录后查看神龙缓存的 POC 文件快照
登录查看