[wp-trac] [WordPress Trac] #47842: <svg/onload=alert('XSS')>

WordPress Trac noreply at wordpress.org
Tue Aug 6 20:45:28 UTC 2019


#47842: <svg/onload=alert('XSS')>
-----------------------------------------+------------------------------
 Reporter:  redhwan                      |       Owner:  (none)
     Type:  defect (bug)                 |      Status:  new
 Priority:  normal                       |   Milestone:  Awaiting Review
Component:  General                      |     Version:  4.9
 Severity:  normal                       |  Resolution:
 Keywords:  <<svg/onload=alert('XSS')>>  |     Focuses:
-----------------------------------------+------------------------------
Changes (by redhwan):

 * keywords:  <svg<svg/onload=alert('XSS')>/onload=alert('XSS')> =>
     <<svg/onload=alert('XSS')>>


-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47842#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list