CVE-2021-28420

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "fromtime" parameter...

Seo Panel 4.8.0 - (from_time) Reflected XSS Vulnerability

Exploit Title: Seo Panel 4.8.0 - 'fromtime' Reflected XSS Exploit Author: Piyush Patil Vendor Homepage: https://www.seopanel.org/ Version: Seo Panel 4.8.0 Tested on: Windows 10 and Kali CVE : CVE-2021-28420 -Description: A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers ...

CVE-2021-28420

creationtimestamp| type| source ---|---|--- 2021-03-18 15:32:12+00:00| seen| https://t.me/cibsecurity/25092 2021-06-03 11:56:47+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/589...

CVE-2021-28420

CVE-2021-28420 is a cross-site scripting (XSS) vulnerability affecting Seo Panel 4.8.0. The issue allows remote attackers to inject JavaScript through alerts.php via the from_time parameter. Several connected sources (Red Hat CVE entry, OSV, CNVD, CVE lists, Exploit-DB) confirm the same flaw and ...