Badgeos 跨站脚本攻击漏洞(CVE-2023-2171)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-2171
• https://access.redhat.com/security/cve/cve-2023-2171
• https://cve.imfht.com/detail/CVE-2023-2171?lang=en
• https://hackhalt.com/threat/cve-2023-2171/
• https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/badgeos/badgeos-3716-missing-authorization-in-delete-badgeos-log-entries
• https://solidwp.com/blog/wordpress-vulnerability-report-july-12-2023/
• https://www.wordfence.com/blog/2023/07/wordfence-intelligence-weekly-wordpress-vulnerability-report-july-3-2023-to-july-9-2023/

Related Vulnerabilities

• PoCCVE-2022-0817: WordPress BadgeOS <=3.7.0 - SQL Injection
• BadgeOS WordPress插件 SQL注入漏洞
• WordPress BadgeOS SQL注入漏洞(CVE-2022-0817)