[Plugin: Infinite-Scroll] Security issue
-
Hello
You have to sanitize your datas, especially the ones from user’s side.
Example: go here:
https://SITE.COM/wp-admin/options-general.php?page=wp_infinite_scroll.php&default=presets
and in any field type ‘ “>XSS ‘ (without single quote)
This result in a XSS attack.
Ok, you have to be admin to exploit it, so, not a big deal, but, use esc_attr() please ??See you !
Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
- The topic ‘[Plugin: Infinite-Scroll] Security issue’ is closed to new replies.