writeups.xyz / A subtle stored-XSS in WordPress core

Submitter : c2a

Date: 17 June 2020

Bounty : undisclosed

Vulnerabilities :

• Stored XSS
• RCE

Programs :

• WordPress

Authors :

• Sam Thomas (@_S_n_t)

Link :
https://pentest.co.uk/labs/research/subtle-stored-xss-wordpress-core/