WordPress Loops & Logic - Reflected XSS
WordPress Loops & Logic - Reflected XSS A Reflected Cross-Site Scripting vulnerability exists in the Wordpress plugin 'Loops & Logic' The ‘name’ parameter of the ‘tangible_fields_fetch’ and ‘tangible_fields_store’ actions is used in the response without any filtering, resulting in a reflected XSS…
Sources
- T1WordPress Loops & Logic - Reflected XSSTenable Research