Persistent XSS in wordpress plugin rockhoist-badges v1.2.2
CVE ID(s):
CVE-2017-6102
Notified: 2017-02-20
Description:
A Stack Overflow inspired plugin for WordPress which allows users to acquire badges for contributing website content. Badges are created and managed through the WordPress Dashboard.
Exploit:
"><script>alert(1);</script> in the title or description field will inject js.