Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2018-10309

Description

The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS.

POC

Reference

- https://gist.github.com/B0UG/f0cfb356e23be3cd6ebea69566d6100a

- https://wpvulndb.com/vulnerabilities/9067

- https://www.exploit-db.com/exploits/44563/

Github

- https://github.com/20142995/nuclei-templates