.. / CVE-2021-25118

• Info Disclosure
• Nuclei
• Web

Exploit for Yoast SEO 16.7-17.2 - Information Disclosure (CVE-2021-25118)

Description:

Yoast SEO plugin 16.7 to 17.2 is susceptible to information disclosure, The plugin discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints, which can help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.

Nuclei Template

View the template here CVE-2021-25118.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-25118.yaml

References: