.. / CVE-2022-2383

Exploit for WordPress Feed Them Social <3.0.1 - Cross-Site Scripting (CVE-2022-2383)

Description:

WordPress Feed Them Social plugin before 3.0.1 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before outputting it back in the page.

Nuclei Template

View the template here CVE-2022-2383.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-2383.yaml
Copy

References:

https://github.com/ARPSyndicate/cvemon
https://wordpress.org/plugins/feed-them-social/
https://nvd.nist.gov/vuln/detail/CVE-2022-2383
https://wpscan.com/vulnerability/4a3b3023-e740-411c-a77c-6477b80d7531
https://github.com/ARPSyndicate/kenzer-templates