Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-10858 PoC — Jetpack 13.0-14.0 - Unauthenticated DOM-XSS

Source
https://github.com/iamarit/CVE-2024-10858
Associated Vulnerability
Title:Jetpack 13.0-14.0 - Unauthenticated DOM-XSS (CVE-2024-10858)
Description:The Jetpack WordPress plugin before 14.1 does not properly checks the postmessage origin in its 13.x versions, allowing it to be bypassed and leading to DOM-XSS. The issue only affects websites hosted on WordPress.com.
Description
Vulnerable WordPress plugin ( Jetpack )
File Snapshot

 [4.0K]  /data/pocs/fce4851806ec7f88995d2407e3c95c01a0d3ab4c
└── [ 949]  index.html

0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →