.. / CVE-2021-24276

• XSS
• Nuclei
• Web

Exploit for WordPress Supsystic Contact Form <1.7.15 - Cross-Site Scripting (CVE-2021-24276)

Description:

WordPress Supsystic Contact Form plugin before 1.7.15 contains a cross-site scripting vulnerability. It does not sanitize the tab parameter of its options page before outputting it in an attribute.

Nuclei Template

View the template here CVE-2021-24276.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-24276.yaml

References: