Back

WordPress Authenticated JavaScript File Upload

By
Prathap
Published on
26 Jun 2022

The old versions of WordPress are vulnerable to cross-site scripting attacks. The old WordPress does not require the unfiltered_html capability to upload the javascript files. This vulnerability could allow attackers to execute Cross-site Scripting attacks using a crafted vulnerable file. Cross-site Scripting (XSS) is a client-side code injection attack where, an attacker can execute malicious scripts into a website or web application. This flaw can cause attackers to access any cookies, session tokens, or other sensitive information retained by the client side.

Impact and Fixes

Automated human-like penetration testing for your web apps & APIs
Teams using Beagle Security are set up in minutes, embrace release-based CI/CD security testing and save up to 65% with timely remediation of vulnerabilities. Sign up for a free account to see what it can do for you.
Product tour
Written by
Prathap
Prathap
Co-founder, Director
Find website security issues in a flash
Improve your website's security posture with proactive vulnerability detection.
Free website security assessment
Experience the power of automated penetration testing & contextual reporting.
Product tour