WordPress Plugin Vulnerabilities
School Management < 57.0 - CSRF and Stored XSS
Description
CSRF and Stored XSS (Cross Site Scripting)
Edit (WPScanTeam):
June 17th - Issue Reported to Envato
June 17th - Envato Support confirmed they are investigating the issue
June 28th - New version released, fixing the XSS but not the CSRF. Envato notified
July 5th - Demo fixed, new version to be released
July 11th - v57.0 released
Proof of Concept
Affects Plugins
Fixed in 57.0 References
Miscellaneous
Original Researcher
m0ns7er
Submitter
Akash Labade
Submitter website
Submitter twitter
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2019-07-11 (about 6 years ago)
Added
2019-07-11 (about 6 years ago)
Last Updated
2019-11-27 (about 6 years ago)
WPScan 