{"uuid": "14a9e11c-b5a0-48e7-a2c4-bf85ea0c50f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24901", "type": "seen", "source": "https://t.me/hacking_Attack/42050", "content": "Exploit Collector\nWordPress Security Audit 1.0.0 Cross Site Scripting\n\nhttps://1.bp.blogspot.com/-ZbrkU7MDvJM/WWlvS7x--YI/AAAAAAAAINk/cO6KWZj5UFE3dAHctfHPCIXMYdjzVDfigCLcBGAs/s1600/h40.png \nWordPress Security Audit plugin version 1.0.0 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | 0447c49cb1da4d97eb0c5a3c4376be33\n\nDownload\n# Exploit Title: WordPress Plugin Security Audit 1.0.0 - Stored Cross Site Scripting (XSS)\n# Date: 2022-01-26\n# Exploit Author: Shweta Mahajan\n# Vendor Homepage: https://en-gb.wordpress.org/plugins/titan-labs-security-audit/\n# Software Link: https://en-gb.wordpress.org/plugins/titan-labs-security-audit/\n# Tested on Windows\n# CVE: CVE-2021-24901\n# Reference: \nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24901\nhttps://wpscan.com/vulnerability/9c315404-b66a-448c-a3b7-367a37b53435\n\nHow to reproduce vulnerability:\n\n1. Install Latest WordPress\n\n2. Install and activate Titan-labs-security-audit Version 1.0.0\n\n3. Navigate to Security Audit settings >> enter the payload into 'Data Id'.\n\n4. Enter JavaScript payload which is mentioned below\n\">x \n\n5. You will observe that the payload successfully got stored into the\ndatabase and when you are triggering the same functionality at that\ntime JavaScript payload gets executed successfully and we'll get a\npop-up.\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:02:17.780449Z"}