4 ms·
Unpatched Wordpress Instance on Yahoo Blog Leads to Cookie Theft
- deleted 14y ago[deleted]
- caseyf 14y agoYikes. Any site with a publicly accessible swfupload.swf is open to XSS. https://nealpoole.com/blog/2012/05/xss-and-csrf-via-swf-applets-swfupload-plupload/ https://nealpoole.com/blog/2012/05/xss-and-csrf-via-swf-appl...