CVE-2019-16931 PoC — WordPress Visualizer插件跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16931.yaml

Associated Vulnerability

Title:WordPress Visualizer插件跨站脚本漏洞 (CVE-2019-16931)
Description:此条漏洞编号已分配，漏洞详情即将更新。

Description

WordPress Visualizer plugin before 3.3.1 contains a stored cross-site scripting vulnerability via /wp-json/visualizer/v1/update-chart WP-JSON API endpoint. An unauthenticated attacker can execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard.

File Snapshot


 id: CVE-2019-16931

info:
  name: WordPress Visualizer <3.3.1 - Cross-Site Scripting
  author: ritik

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.