vw-tour-lite Comment Box Xss Vuln

2019.03.07

Morf1n (TR)

Risk: Low

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: inurl:/wp-content/themes/vw-tour-lite

###############################
Founder: Morf1n
Vuln Name: vw-tour-lite Comment Box Xss Vuln


How can you use this vulnerability? Step By Steps
1- Upload vw-tour-lite in wordpress
2- Apply Theme
3- Open any subject and write to comment box

Code: <script>alert("Xss")</script> 

To find an vuln site
# Dork: inurl:/wp-content/themes/vw-tour-lite

But There Are Not Many Sites.
###############################

See this note in RAW Version

Vote for this issue:

66%

34%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

vw-tour-lite Comment Box Xss Vuln

Dork: inurl:/wp-content/themes/vw-tour-lite

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.