CVE-2023-54351

EIP tracks 1 public exploit for CVE-2023-54351. PoCs published by Furkan Karaarslan.

AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in the WordPress Sonaar Music Plugin 4.7 by injecting a malicious script into the comment section of a playlist page. The payload is executed when the comment is rendered, confirming the vulnerability.

WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the comment functionality. Attackers can submit JavaScript payloads in the comment parameter to wp-comments-post.php which are stored and executed in the browsers of users viewing the affected playlist pages.