.. / CVE-2021-43810

• XSS
• Nuclei
• Web

Exploit for Admidio - Cross-Site Scripting (CVE-2021-43810)

Description:

A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The reflected cross-site scripting vulnerability occurs because redirect.php does not properly validate the value of the url parameter. Through this vulnerability, an attacker is capable to execute malicious scripts.

Nuclei Template

View the template here CVE-2021-43810.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-43810.yaml

References: