HexBrain

Uber · Report #323899

Outdated Wordpress installation and plugins at www.uberxgermany.com create CSRF and XSS vulnerabilities

Validstatus
mediumseverity
$500bounty
29upvotes
25 Feb 2021disclosed

Summary

Outdated Wordpress installation and plugins at www.uberxgermany.com create CSRF and XSS vulnerabilities

This was a pretty simple vulnerability discovered using WPscan that found a few vulnerable plugins.

And be sure to check out my blog https://healdb.tech/blog/ or my Twitter https://twitter.com/heald_ben for Bug Bounty tips and guides!

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original