Description (CNA)
WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the comment functionality. Attackers can submit JavaScript payloads in the comment parameter to wp-comments-post.php which are stored and executed in the browsers of users viewing the affected playlist pages.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sonaar / Sonaar Music Plugin | affected 4.7 |
CWE
CWE-79
References
- https://www.exploit-db.com/exploits/51739
- https://www.vulncheck.com/advisories/wordpress-sonaar-music-plugin-stored-xss-via-comments
ADP enrichment
No English description supplied.
No references supplied.