一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2023-54351 [HIGH] – WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability tha

未分类
📑 文章目录

WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the comment functionality. Attackers can submit JavaScript payloads in the comment parameter to wp-comments-post.php which are stored and executed in the browsers of users viewing the affected playlist pages.