Description
Multiple cross-site scripting (XSS) vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter or (2) kbAction parameter in the kbAmz page to wp-admin/admin.php.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site Scripting http/cves/2017/CVE-2017-14622.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.