.. / CVE-2018-18570

• XSS
• Nuclei
• Web

Exploit for Planon

Description:

Planon before Live Build 41 is vulnerable to cross-site scripting.

Nuclei Template

View the template here CVE-2018-18570.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-18570.yaml

References:

https://github.com/ARPSyndicate/kenzer-templates
https://nvd.nist.gov/vuln/detail/CVE-2018-18570
https://www2.deloitte.com/de/de/pages/risk/articles/planon-cross-site-scripting.html