Skip to content
Threat Feed
Subscribe

Vendor

Molongui

1 brief RSS
high threat

Stored DOM-Based XSS in Molongui Authorship WordPress Plugin

The Molongui Authorship plugin is vulnerable to unauthenticated Stored DOM-based XSS via unsanitized href attributes in comment content, enabling arbitrary script execution in victim browsers.

exploited Molongui Authorship – Author Boxes, Guest Authors & Co-Authors
2t 1c