Exploit for Cooked < 1.7.9.1- Unauthenticated Reflected Cross-Site Scripting (XSS)

wpexploit · 2021-07-01

Description

Unauthenticated Reflected Cross-Site Scripting (XSS) in Cooked < 1.7.9.

Parametert8osi · query param

Pathdemo/trial/5snjx6louabhdpg/profile/

Unauthenticated reflected XSS via improper sanitisation of user input reflected in page attribute (PoC uses t8osi parameter).

Boxystudio Cooked< 1.7.5.6

0.6

LOW SEVERITY

VectorNONE

1.7%higher than 74.8% of all CVEs

Updated 2026-06-16

Modified:2021-08-10 07:23

Last Seen:2021-09-14 23:15

Reporter:whoishacked

MARKDOWN2 lines

## https://sploitus.com/exploit?id=WPEX-ID:EED348B8-FAAC-43B4-82CD-ED0172F40E53
The PoC will be displayed once the issue has been remediated