Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2017-18492 PoC — WordPress contact-form-to-db插件跨站脚本漏洞

Source
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18492.yaml
Associated Vulnerability
Title:WordPress contact-form-to-db插件跨站脚本漏洞 (CVE-2017-18492)
Description:WordPress contact-form-to-db插件1.5.7之前版本中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
Description
The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.
File Snapshot

 id: CVE-2017-18492

info:
  name: Contact Form to DB by BestWebSoft < 1.5.7 - Cross-Site Scripting
 

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.