.. / CVE-2023-6389

• Open Redirect
• Nuclei
• Web

Exploit for WordPress Toolbar <= 2.2.6 - Open Redirect (CVE-2023-6389)

Description:

The plugin redirects to any URL via the “wptbto” parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

Nuclei Template

View the template here CVE-2023-6389.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-6389.yaml

References: