| शीर्षक | Question2Answer Question2Answer Plugin 1.4.6 Cross Site Scripting |
|---|
| विवरण | An XSS vulnerability that also allows account theft just by clicking on the Plugin notification, it is a very famous plugin, being listed even on Question2Answer's recommended page, it was estimated at about ~20 thousand users, I reported it to the developer, he recognized it and fixed it
https://github.com/q2apro/q2apro-on-site-notifications/issues/43
https://github.com/q2apro/q2apro-on-site-notifications/commit/0ca85ca02f8aceb661e9b71fd229c45d388ea5b5 |
|---|
| स्रोत | ⚠️ https://github.com/q2apro/q2apro-on-site-notifications/issues/43 |
|---|
| उपयोगकर्ता | Canguru (UID 84603) |
|---|
| सबमिशन | 24/04/2025 10:12 AM (1 वर्ष पहले) |
|---|
| संयम | 05/05/2025 07:21 PM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 307479 [q2apro q2apro-on-site-notifications तक 1.4.6 q2apro-onsitenotifications-page.php process_request क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|