Skip To Main Content
Gaetano Perrone on Muck Rack

Gaetano Perrone

As seen in: Packetst Storm
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Gaetano Perrone’s profile

Articles by Gaetano Perrone

WordPress CRM Form Entries Cross Site Scripting

|
By Gaetano Perrone, Site secsi.io, Matthias Deeg
Hello, today I disclosed the CVE-2021-25080 vulnerability. Here attached technical information: # References: * https://wpscan.com/vulnerability/acd3d98a-aab8-49be-b77e-e8c6ede171ac * https://secsi.io/blog/cve-2021-25080-finding-cross-site-scripting-vulnerabilities-in-headers/ # Description: WordPress before 5.2.3 allows XSS in post previews by authenticated users. # Technical Details and Exploitation: CRM Form Entries CRM is vulnerable to a Stored XSS in Client IP field.
Open in Who Shared Issue with article?

WordPress CRM Form Entries Cross Site Scripting

|
By Gaetano Perrone, Andreas Andersen, Site secsi.io
| Packetst Storm
Hello, today I disclosed the CVE-2021-25080 vulnerability. Here attached technical information: # References: * https://wpscan.com/vulnerability/acd3d98a-aab8-49be-b77e-e8c6ede171ac * https://secsi.io/blog/cve-2021-25080-finding-cross-site-scripting-vulnerabilities-in-headers/ # Description: WordPress before 5.2.3 allows XSS in post previews by authenticated users. # Technical Details and Exploitation: CRM Form Entries CRM is vulnerable to a Stored XSS in Client IP field.
Open in Who Shared Issue with article?

CVE-2021-25080 vulnerability

|
By Gaetano Perrone
| seclists.org
Full Disclosure mailing list archives By Date By Thread CVE-2021-25080 vulnerability From: Gaetano Perrone <gaetano.perrone () secsi io> Date: Wed, 22 Dec 2021 14:05:56 +0100 Hello, today I disclosed the CVE-2021-25080 vulnerability.
Open in Who Shared Issue with article?
Show More