CVEs-PoC/2021/CVE-2021-25063.md

CVE-2021-25063

Description

The Skins for Contact Form 7 WordPress plugin before 2.5.1 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

POC

Reference

• https://wpscan.com/vulnerability/e2185887-3e53-4089-aa3f-981c944ee0bb
• https://wpscan.com/vulnerability/e2185887-3e53-4089-aa3f-981c944ee0bb

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates