## https://sploitus.com/exploit?id=PACKETSTORM:180465
=============================================================================================================================================
| # Title : WordPress WP Event Manager plugin 3.1.44 XSS Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 128.0.3 (64 bits) |
| # Vendor : https://wordpress.org/plugins/wp-event-manager/ |
=============================================================================================================================================
poc :
[+] Dorking İn Google Or Other Search Enggine.
[+] Install the plugins - wp-event-manager and activate it.
[+] Go to event manager —> Add New - Inside the “”Event Title” at the top, enter XSS payload “><img src=xonerror=alert(1)> and hit publish.
[+] Check the newly made event’s URL /event/{id}/ , XSS will trigger.
Greetings to :============================================================
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * CraCkEr |
==========================================================================