.. / CVE-2021-3002

Exploit for Seo Panel 4.8.0 - Cross-Site Scripting (CVE-2021-3002)

Description:

Seo Panel 4.8.0 contains a reflected cross-site scripting vulnerability via the seo/seopanel/login.php?sec=forgot email parameter.

Nuclei Template

View the template here CVE-2021-3002.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-3002.yaml
Copy

References:

https://github.com/ArrestX/--POC
https://github.com/seopanel/Seo-Panel/issues/202
https://nvd.nist.gov/vuln/detail/CVE-2021-3002
http://www.cinquino.eu/SeoPanelReflect.htm
https://github.com/ARPSyndicate/kenzer-templates