cve/2012/CVE-2012-10018.md

CVE-2012-10018

Description

The Mapplic and Mapplic Lite plugins for WordPress are vulnerable to Server-Side Request Forgery in versions up to, and including 6.1, 1.0 respectively. This makes it possible for attackers to forgery requests coming from a vulnerable site's server and ultimately perform an XSS attack if requesting an SVG file.

POC

Reference

• https://packetstormsecurity.com/files/161919/
• https://packetstormsecurity.com/files/161920/

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/cyb3r-w0lf/nuclei-template-collection