CalvinBackup/CVEs-PoC
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-05-14 15:08:03 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
b0e96c877abb080d7cf221c036336480ff266ccf
CVEs-PoC/2021/CVE-2021-24664.md
T
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

19 lines
941 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
### [CVE-2021-24664](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24664)
![](https://img.shields.io/static/v1?label=Product&message=School%20Management%20System%20%E2%80%93%20WPSchoolPress&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.1.17%3C%202.1.17%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-site%20Scripting%20(XSS)&color=brighgreen)
### Description
The School Management System – WPSchoolPress WordPress plugin before 2.1.17 sanitise some fields using sanitize_text_field() but does not escape them before outputting in attributes, resulting in Stored Cross-Site Scripting issues.
### POC
#### Reference
- http://packetstormsecurity.com/files/164974/WordPress-WPSchoolPress-2.1.16-Cross-Site-Scripting.html
- https://wpscan.com/vulnerability/3f8e170c-6579-4b1a-a1ac-7d93da17b669
#### Github
- https://github.com/ARPSyndicate/cvemon
Reference in New Issue View Git Blame Copy Permalink