CVE-2021-47982
MEDIUMWordPress Plugin WP-Paginate 2.1.3 Stored XSS via preset
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47982. PoCs published by Park Won Seok.
AI-analyzed exploit summary This is a functional proof-of-concept for a stored XSS vulnerability in the WordPress WP-Paginate plugin (version 2.1.3). The exploit demonstrates how an attacker can inject malicious JavaScript via the 'preset' parameter, which is then stored and executed in the context of an admin user's session.
Description
WordPress Plugin WP-Paginate 2.1.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the preset parameter. Attackers can submit POST requests to the plugin settings page with script payloads in the preset parameter that are stored and executed when administrators view the settings.
Exploits (1)
This is a functional proof-of-concept for a stored XSS vulnerability in the WordPress WP-Paginate plugin (version 2.1.3). The exploit demonstrates how an attacker can inject malicious JavaScript via the 'preset' parameter, which is then stored and executed in the context of an admin user's session.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N