Cross-Site Scripting Wordpress Plugin How-Interest
|########################################|
"#"#"#" PoC "#"#"#"
function how_interest_submit()
echo "name = " . $name . ", email = " . $email . ", date = " . $date; // widget.php
$name = $_POST['name']; // widget.php
$email = $_POST['email']; // widget.php
$date = time(); // widget.php
|########################################|
Dork :
inurl:"how-interest/how-interest.php"
Plugin Url :
https://fuc.wordpress.org/plugins/how-interest/
|########################################|
By : @wazehell
