POC详情： 473a90e66dd2477b7aae78a5059521906b4dd484

描述

The Instagram Feed WordPress plugin before 1.6 contains a reflected cross-site scripting (XSS) vulnerability due to improper sanitization of user-supplied input, allowing attackers to inject malicious scripts via crafted requests.

文件快照

 id: wp-instagram-feed-xss

info:
  name: Instagram Feed < 1.6 - Cross-Site Scripting
  author: theam

...

备注