CVEs-PoC/2017/CVE-2017-1000033.md

CVE-2017-1000033

Description

Wordpress Plugin Vospari Forms version < 1.4 is vulnerable to a reflected cross site scripting in the form submission resulting in javascript code execution in the context on the current user.

POC

Reference

• https://cjc.im/advisories/0007/
• https://wpvulndb.com/vulnerabilities/8862

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon