.. / CVE-2022-41441

• XSS
• Nuclei
• Web

Exploit for ReQlogic v11.3 - Cross Site Scripting (CVE-2022-41441)

Description:

ReQlogic v11.3 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the POBatch and WaitDuration parameters.

Nuclei Template

View the template here CVE-2022-41441.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-41441.yaml

References: