CVE-2021-41467 PoC — JustWriting 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41467.yaml

Associated Vulnerability

Title:JustWriting 跨站脚本漏洞 (CVE-2021-41467)
Description:JustWriting是一个简单的博客平台。 JustWriting 1.0.0 及以下版本存在跨站脚本漏洞，该漏洞允许远程攻击者通过challenge参数注入任意 Web 脚本或 HTML。

Description

A cross-site scripting vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter.

File Snapshot


 id: CVE-2021-41467

info:
  name: JustWriting  -  Cross-Site Scripting
  author: madrobot
  severity

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!