Archive
2 February 2023
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium 4.7
All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS
The All-in-One WP Migration WordPress plugin before 7.63 uses the wrong content type, and does not properly escape the response from the ai1wm_export AJAX action, allowing an attacker to craft a request that when submitted by any visitor will inject arbitrary…