EDB-49808
PoCKirby CMS 3.5.3.1 - 'file' Cross-Site Scripting (XSS)
view exploit source exploit_dbtype webappsauthor Sreenath Raghunathanpublished 2021-04-28catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-29460US | medium5.4 | Exploit | ||
Kirby is an open source CMS. An editor with write access to the Kirby Panel can upload an SVG file that contains harmful content like `<script>` tags. The direct link to that file… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan