.. / CVE-2022-0381

• XSS
• Nuclei
• Web

Exploit for WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting (CVE-2022-0381)

Description:

WordPress Embed Swagger plugin 1.0.0 and prior contains a reflected cross-site scripting vulnerability due to insufficient escaping/sanitization and validation via the url parameter found in the ~/swagger-iframe.php file, which allows attackers to inject arbitrary web scripts onto the page.

Nuclei Template

View the template here CVE-2022-0381.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-0381.yaml

References: