（CVE-2025-6174）Qwizcards WordPress插件3.9.4及之前版本反射型跨站脚本漏洞

漏洞描述

PoC代码

暂无

相关漏洞推荐

• Flowise /api/v1/node-load-method/customMCP 命令执行漏洞（CVE-2025-8943）
• dpanel /api/app/compose/get-from-uri 文件读取漏洞（CVE-2025-53363）
• Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞（CVE-2025-64446/CVE-2025-58034）
• POC CVE-2017-14725: WordPress < 4.8.2 - Authenticated Open Redirect
• POC CVE-2017-17092: WordPress < 4.9.1 - Authenticated JavaScript File Upload
• POC CVE-2018-13317: TOTOLINK A3002RU 1.0.8 - Information Disclosure
• POC CVE-2019-19823: TOTOLINK/Realtek Routers - Information Disclosure
• POC CVE-2021-34427: Eclipse BIRT Viewer - Remote Code Execution
• POC CVE-2025-55523: Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Download
• POC CVE-2025-9316: N-central - Authentication Bypass
• POC wp-security-hidden-login-exposure: WordPress All-in-One Security <=4.4.1 - Hidden Login Page Exposure
• WordPress Kognetiks Chatbot for WordPress <= 2.0.0 任意文件上传漏洞
• POC CVE-2024-37656: GnuBoard5 5.5.16 - Open Redirect