CVEs-PoC/2021/CVE-2021-24156.md

CVE-2021-24156

Description

Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inject arbitrary JavaScript code or HTML without approval. This could lead to privilege escalation

POC

Reference

• https://wpscan.com/vulnerability/8b6f4a77-4008-4730-9a91-fa055a8b3e68

Github

• https://github.com/20142995/nuclei-templates