CVEs-PoC/2022/CVE-2022-1724.md

CVE-2022-1724

Description

The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting

POC

Reference

• https://wpscan.com/vulnerability/96a0a667-9c4b-4ea6-b78a-0681e9a9bbae

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/cyllective/CVEs