WordPress · Report #270060
Reflected Swf XSS In ( plugins.svn.wordpress.org )
Validstatus
mediumseverity
21upvotes
27 Sept 2018disclosed
Summary
Full disclose here : https://www.mohamedharon.com/2018/08/wordpressXSS.html
How it was found
Hello , I have found XSS in flash File ( video-js.swf ) in plugins.svn.wordpress.org and Content Spoofing Vulnerability in moxieplayer.swf
** POC **
{F222664}