CVE-2022-29455

This PoC demonstrates a Cross-Site Scripting (XSS) vulnerability in WordPress Elementor plugin versions <= 3.5.5. The exploit leverages a maliciously crafted URL to inject JavaScript code via the `frontend.min.js` file.

This PoC exploits a stored XSS vulnerability in Elementor WordPress plugin (CVE-2022-29455) to create an admin user via CSRF. It crafts a malicious payload that, when executed, sends an AJAX request to create a new administrator account.

This repository provides a Proof of Concept (PoC) for CVE-2022-29455, an XSS vulnerability in WordPress Elementor plugin versions <= 3.5.5. The exploit leverages a maliciously crafted URL to trigger a cross-site scripting attack via the plugin's frontend.min.js file.

This repository contains a mass scanner for CVE-2022-29455, which targets the Elementor plugin for WordPress. The script checks for vulnerable versions of the plugin by querying the readme.txt file and comparing version numbers.

This repository contains a mass scanner for CVE-2022-29455, which targets vulnerable versions of the Elementor plugin for WordPress. The script checks for the presence of the plugin and its version to determine vulnerability status.

This repository contains a proof-of-concept exploit for CVE-2022-29455, a stored XSS vulnerability in WordPress Elementor plugin versions <= 3.5.5. The exploit leverages the `elementor-action` URL parameter to inject malicious JavaScript payloads, which can create an administrator account via CSRF.

This repository contains a mass scanner for CVE-2022-29455, which targets vulnerable versions of the Elementor plugin for WordPress. The script checks for the presence of the plugin and its version to determine vulnerability status.