.. / CVE-2021-27909

• XSS
• Nuclei
• Web

Exploit for Mautic <3.3.4 - Cross-Site Scripting (CVE-2021-27909)

Description:

Mautic before 3.3.4 contains a cross-site scripting vulnerability on the password reset page in the bundle parameter of the URL. An attacker can inject arbitrary script, steal cookie-based authentication credentials, and/or launch other attacks.

Nuclei Template

View the template here CVE-2021-27909.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-27909.yaml

References: