EDB-44837

PoC

Pagekit < 1.0.13 - Cross-Site Scripting Code Generator

view exploit source exploit_dbtype webappsauthor DEEPIN2published 2018-06-05catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-11564USmedium4.8Exploit
Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan