Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2021-41182 PoC — jQuery 跨站脚本漏洞

Source
Associated Vulnerability
Title:jQuery 跨站脚本漏洞 (CVE-2021-41182)
Description:jQuery是美国John Resig个人开发者的一套开源、跨浏览器的JavaScript库。该库简化了HTML与JavaScript之间的操作,并具有模块化、插件扩展等特点。 jQuery-UI 1.13.0之前版本存在跨站脚本漏洞,攻击者可以通过"altField"选项的值执行任意代码。
Description
Some test files to make a good nuclei template for a JQuery UI XSS vuln
File Snapshot

[4.0K] /data/pocs/6a138197a76ded7d8c520b7f10c606134afa4b9f ├── [1.7K] CVE-2021-41182.yaml ├── [3.0K] index.html ├── [4.0K] jquery-ui-1.12.1 │   ├── [ 12K] AUTHORS.txt │   ├── [4.0K] external │   │   └── [4.0K] jquery │   │   └── [287K] jquery.js │   ├── [4.0K] images │   │   ├── [6.8K] ui-icons_444444_256x240.png │   │   ├── [6.9K] ui-icons_555555_256x240.png │   │   ├── [4.6K] ui-icons_777620_256x240.png │   │   ├── [6.8K] ui-icons_777777_256x240.png │   │   ├── [4.5K] ui-icons_cc0000_256x240.png │   │   └── [6.2K] ui-icons_ffffff_256x240.png │   ├── [ 32K] index.html │   ├── [ 36K] jquery-ui.css │   ├── [509K] jquery-ui.js │   ├── [ 31K] jquery-ui.min.css │   ├── [248K] jquery-ui.min.js │   ├── [ 18K] jquery-ui.structure.css │   ├── [ 15K] jquery-ui.structure.min.css │   ├── [ 18K] jquery-ui.theme.css │   ├── [ 14K] jquery-ui.theme.min.css │   ├── [1.8K] LICENSE.txt │   └── [1.8K] package.json └── [4.0K] jquery-ui-1.13.3 ├── [ 14K] AUTHORS.txt ├── [4.0K] external │   └── [4.0K] jquery │   └── [279K] jquery.js ├── [4.0K] images │   ├── [7.0K] ui-icons_444444_256x240.png │   ├── [6.9K] ui-icons_555555_256x240.png │   ├── [4.5K] ui-icons_777620_256x240.png │   ├── [7.0K] ui-icons_777777_256x240.png │   ├── [4.5K] ui-icons_cc0000_256x240.png │   └── [6.4K] ui-icons_ffffff_256x240.png ├── [ 32K] index.html ├── [ 37K] jquery-ui.css ├── [517K] jquery-ui.js ├── [ 31K] jquery-ui.min.css ├── [249K] jquery-ui.min.js ├── [ 18K] jquery-ui.structure.css ├── [ 15K] jquery-ui.structure.min.css ├── [ 18K] jquery-ui.theme.css ├── [ 14K] jquery-ui.theme.min.css ├── [1.8K] LICENSE.txt └── [2.1K] package.json 8 directories, 40 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.