{"uuid": "2411954a-27c6-4793-a289-448387aa7ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24313", "type": "seen", "source": "https://t.me/hacking_Attack/10990", "content": "Exploit Collector\nWordPress WP Prayer 1.6.1 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-Nz8u9CyJbsU/WWlveW9d4WI/AAAAAAAAIPw/tdSVtwWBcYIHlgRN6nbdKVd_fE-UdNKsACLcBGAs/s1600/h80.png \nWordPress WP Prayer plugin version 1.6.1 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | a68a7b64369f6b1a3d49b44df9c98526\n\nDownload\n# Exploit Title: WordPress Plugin WP Prayer version 1.6.1 - 'prayer_messages' Stored Cross-Site Scripting (XSS) (Authenticated)\n# Date: 2021-05-31\n# Exploit Author: Bastijn Ouwendijk\n# Vendor Homepage: http://goprayer.com/\n# Software Link: https://wordpress.org/plugins/wp-prayer/\n# Version: 1.6.1 and earlier\n# Tested on: Windows 10\n# Proof: https://bastijnouwendijk.com/cve-2021-24313/\n\nSteps to exploit this vulnerability:\n\n1. Log into the WordPress website with a user account, can be a user with any role\n2. Go to the page where prayer or praise request can be made and fill in the requested information\n3. In the 'prayer_messages' field of the prayer request form put the payload: \n4. Submit the form\n5. Go to the page where the prayer requests are listed\n6. The prayer requests are loaded and an alert is shown with text 'XSS' in the browser\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:40.555577Z"}