Can't figure out this link injection

Th3 Technician said:

Damn, i'm good. Thank you for sharing this with me i might use it as well lol

I got it, read this 'https://www.wordfence.com/blog/2018...ecurity-release-immediate-update-recommended/'

There is a huge vulnerability in wordpress released recently these folks are exploiting it, view source of the website they are targeting wordpress '5.0.1' which is vulnerable to it.

Click to expand...

magicjones said:

I'm not finding any ways to do with without author privileges, am I missing something?

Click to expand...

Th3 Technician said:

https://www.exploit-db.com/
^ Search "Wordpress" there is ton of XSS exploits, Which can be used to modify content of the page. Also not all the exploits are published


P.S i've reported the hack to the owners of the sites you listed and some other sites.


Edit: Check this too -> https://wpvulndb.com/wordpresses

Click to expand...