In today’s post I am going to show a real-world example of stealing someone’s WordPress credentials using XSS exploitation, and getting shell access to the underlying host.
more here..........https://blog.gaborszathmari.me/2014/12/10/wordpress-exploitation-with-xss/
more here..........https://blog.gaborszathmari.me/2014/12/10/wordpress-exploitation-with-xss/