.. / CVE-2021-24316

• XSS
• Nuclei
• Web

Exploit for WordPress Mediumish Theme <=1.0.47 - Cross-Site Scripting (CVE-2021-24316)

Description:

WordPress Mediumish theme 1.0.47 and prior contains an unauthenticated reflected cross-site scripting vulnerability. The ‘s’ GET parameter is not properly sanitized by the search feature before it is output back on the page.

Nuclei Template

View the template here CVE-2021-24316.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-24316.yaml

References: