Description
The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed to WordPress's shortcode engine, allowing unauthenticated attackers to have arbitrary shortcodes registered on the site executed server-side.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Brave | < 0.8.8 | 0.8.8 |
References
- https://wpscan.com/vulnerability/049d0bfc-962b-4f5b-a089-c45f4ad981e3/ exploit vdb-entry technical-description