.. / CVE-2017-17451

Exploit for WordPress Mailster <=1.5.4 - Cross-Site Scripting (CVE-2017-17451)

Description:

WordPress Mailster 1.5.4 and before contains a cross-site scripting vulnerability in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php.

Nuclei Template

View the template here CVE-2017-17451.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2017/CVE-2017-17451.yaml
Copy

References:

https://github.com/ARPSyndicate/cvemon
https://wordpress.org/plugins/wp-mailster/#developers
https://wpvulndb.com/vulnerabilities/8973
https://nvd.nist.gov/vuln/detail/CVE-2017-17451
https://packetstormsecurity.com/files/145222/WordPress-WP-Mailster-1.5.4.0-Cross-Site-Scripting.html