（CVE-2022-2473）WordPress WP-UserOnline插件2.87.6前版本存储型跨站点脚本漏洞

漏洞描述

PoC代码

暂无

相关漏洞推荐

• POC CVE-2020-16248: Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)
• POC CVE-2025-28242: DAEnetIP4 METO v1.25 - Session Hijacking
• POC CVE-2025-56132: LiquidFiles < 4.2 - User Enumeration via Password Reset
• POC wordpress-simple-social-icons-fpd: WordPress Simple Social Icons - Full Path Disclosure
• POC CVE-2020-15081: PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory
• POC CVE-2020-26935: phpMyAdmin < 5.0.3 - SQL Injection
• POC CVE-2020-5722: Grandstream UCM6200 - SQL Injection
• POC CVE-2020-9314: Oracle iPlanet Web Server 7.0.x - Image Injection
• POC CVE-2021-21246: OneDev < 4.0.3 - User Access Token Leak
• POC CVE-2021-22881: Ruby on Rails - Open Redirect via Host Header Injection
• POC CVE-2022-0188: CMP WordPress < 4.0.19 - Broken Access Control
• POC CVE-2022-41697: Ghost CMS - User Enumeration
• POC CVE-2022-4223: pgAdmin < 6.17 - Unauthenticated Remote Code Execution