.. / CVE-2021-24510

• XSS
• Nuclei
• Web

Exploit for WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting (CVE-2021-24510)

Description:

WordPress MF Gig Calendar plugin 1.1 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize or escape the id GET parameter before outputting back in the admin dashboard when editing an event.

Nuclei Template

View the template here CVE-2021-24510.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-24510.yaml

References: