writeups.xyz / XSS in WordPress via open embed auto discovery

Submitter : c2a

Date: 29 May 2023

Bounty : undisclosed

Vulnerabilities :

• XSS
• PostMessage

Programs :

• WordPress

Authors :

• Jakub Żoczek (@Zoczus)

Link :
https://research.securitum.com/xss-in-wordpress-via-open-embed-auto-discovery/