.. / CVE-2021-25033

• Open Redirect
• Nuclei
• Web

Exploit for Noptin < 1.6.5 - Open Redirect (CVE-2021-25033)

Description:

Noptin < 1.6.5 is susceptible to an open redirect vulnerability. The plugin does not validate the “to” parameter before redirecting the user to its given value, leading to an open redirect issue.

Nuclei Template

View the template here CVE-2021-25033.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-25033.yaml

References: