EIP-2026-113556
PRE-CVEWordPress Plugin All In One WP Security & Firewall 3.8.3 - Persistent Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113556. PoCs published by Vulnerability-Lab.
AI-analyzed exploit summary The exploit demonstrates a persistent XSS vulnerability in the All In One WordPress Security plugin v3.8.3, where malicious script codes can be injected via the 404 detection redirect URL and file name error logs URL input fields. The PoC shows how an attacker can inject script codes that persist and execute in the application context.
Description
WordPress Plugin All In One WP Security & Firewall 3.8.3 - Persistent Cross-Site Scripting
Exploits (1)
The exploit demonstrates a persistent XSS vulnerability in the All In One WordPress Security plugin v3.8.3, where malicious script codes can be injected via the 404 detection redirect URL and file name error logs URL input fields. The PoC shows how an attacker can inject script codes that persist and execute in the application context.