The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php.

Published Oct 23, 2017 · Updated Aug 5, 2024 · Assigned by mitre