.. / CVE-2021-40542

• XSS
• Nuclei
• Web

Exploit for Opensis-Classic 8.0 - Cross-Site Scripting (CVE-2021-40542)

Description:

Opensis-Classic Version 8.0 is affected by cross-site scripting. An unauthenticated user can inject and execute JavaScript code through the link_url parameter in Ajax_url_encode.php.

Nuclei Template

View the template here CVE-2021-40542.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-40542.yaml

References: