Using Wordpress for CSP Bypass by exploiting SOME

Using Wordpress for CSP Bypass by exploiting SOME

#Wordpress #CSP #Bypass #exploiting

“Octagon Networks”

There is a way to bypass CSP on sites that use Wordpress on a subdomain or a directory by exploiting a SOME vulnerability abusing a jsonp endpoint.

source