CVE-2023-37979

This exploit demonstrates a reflected XSS vulnerability in WordPress Ninja Forms plugin version 3.6.25. It generates an HTML page that, when interacted with, triggers an XSS payload via a crafted form submission to the vulnerable endpoint.

This repository contains a functional Python script and Nuclei template for exploiting CVE-2023-37979, a reflected XSS vulnerability in Ninja Forms WordPress plugin versions up to 3.6.25. The script generates an HTML PoC file that triggers the XSS payload when interacted with by an authenticated user.

The repository contains a functional Python script that exploits CVE-2023-37979, a reflected XSS vulnerability in Ninja Forms WordPress plugin versions up to 3.6.25. The script generates an HTML PoC file that triggers the XSS via a crafted 'data' parameter in a POST request to the vulnerable endpoint.

This repository contains a functional exploit for CVE-2023-37979, an unauthenticated reflected XSS vulnerability in the Ninja Forms Contact Form plugin (versions <= 3.6.25). The exploit sends a crafted payload to the vulnerable endpoint and checks for the presence of the plugin and its version.