CVEs-PoC/2021/CVE-2021-25048.md

### [CVE-2021-25048](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25048)
![](https://img.shields.io/static/v1?label=Product&message=Page%20Builder%3A%20KingComposer%20%E2%80%93%20Free%20Drag%20and%20Drop%20page%20builder%20by%20King-Theme&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.9.6%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-site%20Scripting%20(XSS)&color=brightgreen)

### Description

The KingComposer WordPress plugin through 2.9.6 does not have authorisation, CSRF and sanitisation/escaping when creating profile, allowing any authenticated users to create arbitrary ones, with Cross-Site Scripting payloads in them

### POC

#### Reference
- https://wpscan.com/vulnerability/5687e5db-d987-416d-a7f4-036cce4d56cb

#### Github
- https://github.com/20142995/nuclei-templates