CVE-2021-24316 PoC — Mediumish <= 1.0.47 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24316.yaml

Associated Vulnerability

Title: Mediumish <= 1.0.47 - Unauthenticated Reflected Cross-Site Scripting (XSS) (CVE-2021-24316)
Description:The search feature of the Mediumish WordPress theme through 1.0.47 does not properly sanitise it's 's' GET parameter before output it back the page, leading to the Cross-SIte Scripting issue.

Description

WordPress Mediumish theme 1.0.47 and prior contains an unauthenticated reflected cross-site scripting vulnerability. The 's' GET parameter is not properly sanitized by the search feature before it is output back on the page.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →