CVEs-PoC/2017/CVE-2017-20053.md

CVE-2017-20053

Description

A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

POC

Reference

• https://sumofpwn.nl/advisory/2016/cross_site_request_forgery___cross_site_scripting_in_contact_form_manager_wordpress_plugin.html
• https://vuldb.com/?id.97387

Github

• https://github.com/20142995/nuclei-templates