.. / CVE-2017-18598

Exploit for WordPress Qards - Cross-Site Scripting (CVE-2017-18598)

Description:

WordPress Qards through 2017-10-11 contains a cross-site scripting vulnerability via a remote document specified in the URL parameter to html2canvasproxy.php.

Nuclei Template

View the template here CVE-2017-18598.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2017/CVE-2017-18598.yaml
Copy

References:

https://github.com/ARPSyndicate/cvemon
https://wpscan.com/vulnerability/8934
https://nvd.nist.gov/vuln/detail/CVE-2017-18598
https://wpvulndb.com/vulnerabilities/8934
https://wpscan.com/vulnerability/454a0ce3-ecfe-47fc-a282-5caa51370645