WordPress has fixed a preauthentication reflected crosssite scripting XSS flaw in its login screen that affects every version of the content management system. pwn.ai demonstrated how the flaw can be chained into PHP code execution on the server when a loggedin administrator interacts with an attackercontrolled page. Tracked as CVE202664638 CVSS score 8.9, the highseverity.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity