5 ms·

Hi, just a heads up, I think your site has the XSS vulnerability, namely parameter "s" - common in wordpress search function. To see it in action, try adding "/

Hi, just a heads up, I think your site has the XSS vulnerability, namely parameter "s" - common in wordpress search function. To see it in action, try adding "/?s=aaa<script>alert(16354)<%2Fscript>" at the end.

sgdesign 14y ago
That didn't do anything for me. I'd hope WordPress escapes MySQL and JS code from query strings, that seems like a pretty big vulnerability…