关联漏洞
描述
CVE-2024-11428 poc exploit
介绍
# CVE-2024-11428
CVE-2024-11428 poc exploit
The Lazy load videos and sticky control plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lazy-load-videos-and-sticky-control' shortcode in all versions up to, and including, 3.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
文件快照
[4.0K] /data/pocs/e653bc24b7245b1ccd3ea82b1cb999f7d39d385a
├── [4.0K] CVE-2024-11428
│ └── [ 200] CVE-2024-11428.txt
└── [ 544] README.md
1 directory, 2 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问,请发送邮箱到 f.jinxu#gmail.com 索取本地快照(把 # 换成 @)。
3. 神龙已为您对POC代码进行快照,为了长期维护,请考虑为本地POC付费,感谢您的支持。