Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2015-5622

Description

Cross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the Author or Contributor role to place a crafted shortcode inside an HTML element, related to wp-includes/kses.php and wp-includes/shortcodes.php.

POC

Reference

- https://wpvulndb.com/vulnerabilities/8111

Github

- https://github.com/20142995/nuclei-templates

- https://github.com/AGENTGOOBER/CyberSecurityWeek7

- https://github.com/ARPSyndicate/cvemon

- https://github.com/Afetter618/WordPress-PenTest

- https://github.com/DannyLi804/CodePath-Pentesting

- https://github.com/GianfrancoLeto/CodepathWeek7

- https://github.com/HarryMartin001/WordPress-vs.-Kali-Week-7-8

- https://github.com/Japluas93/WordPress-Exploits-Project

- https://github.com/Laugslander/codepath-cybersecurity-week-7

- https://github.com/MXia000/WordPress_Pentesting

- https://github.com/SLyubar/codepath_Unit8

- https://github.com/SofCora/pentesting_project_sofcora

- https://github.com/XiaoyanZhang0999/WordPress_presenting

- https://github.com/ahmedj98/Pentesting-Unit-7

- https://github.com/alexanderkoz/Web-Security-Week-7-Project-WordPress-vs.-Kali

- https://github.com/and-aleksandrov/wordpress

- https://github.com/baronanriel/codepath_Hw7

- https://github.com/beelzebielsk/csc59938-week-7

- https://github.com/bryanvnguyen/WordPress-PT

- https://github.com/choyuansu/Week-7-Project

- https://github.com/christiancastro1/Codepath-Week-7-8-Assignement

- https://github.com/dinotrooper/codepath_week7_8

- https://github.com/drsh0x2/WebSec-Week7

- https://github.com/emilylaih/Weeks-7-8-Project-WordPress-vs.-Kali

- https://github.com/greenteas/week7-wp

- https://github.com/hiraali34/codepath_homework

- https://github.com/j5inc/week7

- https://github.com/jas5mg/Code-Path-Week7

- https://github.com/jguerrero12/WordPress-Pentesting

- https://github.com/jlangdev/WPvsKali

- https://github.com/jubril4/WordPress-Vs-Kali-Pentesting-Setup-

- https://github.com/kennyhk418/Codepath_project7

- https://github.com/kiankris/CodePath-Project7

- https://github.com/krs2070/WordPressVsKaliProject

- https://github.com/krushang598/Cybersecurity-Week-7-and-8

- https://github.com/lihaojin/WordPress-Pentesting

- https://github.com/lqiu1127/Codepath-wordpress-exploits

- https://github.com/mattdegroff/CodePath_Wk7

- https://github.com/mmehrayin/cybersecurity-week7

- https://github.com/natlarks/Week7-WordPressPentesting

- https://github.com/notmike/WordPress-Pentesting

- https://github.com/syang1216/Wordpress

- https://github.com/teimilola/RecreatingWordPressExploits

- https://github.com/vkril/Cybersecurity-Week-7-Project-WordPress-vs.-Kali

- https://github.com/yud121212/WordPress-PT

- https://github.com/zakia00/Week7Lab

- https://github.com/zjasonshen/CodepathWebSecurityWeek7