Nuclei Template
View the template here CVE-2022-48012.yaml
Validate with Nuclei
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-48012.yaml
OpenCATS 0.9.7 contains a cross-site scripting vulnerability via the component /opencats/index.php?m=settings&a=ajax_tags_upd. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site, which can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
View the template here CVE-2022-48012.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-48012.yaml
References:
https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities