mehran-seifalinia/cve-2023-37979Python exploit script and Nuclei template for CVE-2023-37979, a reflected XSS vulnerability in the Ninja-forms WordPress plugin, enabling automated detection and PoC verification.
| CVE ID | CVSS Score | Discovered | Affected Plugin | Vendor | Vulnerability Type |
|---|
| CVE-2023-37979 |  | 27/07/2023 | WordPress Plugin | Ninja-forms | Reflected XSS |
This Python script exploits the reflected Cross-Site Scripting (XSS) vulnerability CVE-2023-37979 found in the Ninja-forms WordPress plugin.
This vulnerability allows attackers to inject arbitrary scripts (e.g., redirects, phishing payloads) which execute when users interact with certain pages.
🔹 Fixed in version 3.6.26.
I have also created a Nuclei template to detect vulnerable versions of the plugin (<= 3.6.25).
While the Python script provides exploit verification, the Nuclei template is ideal for bulk scanning and automated detection.
python3 CVE-2023-37979.py [OPTIONS] [TARGET]
OPTIONS:
--exploit Open a browser and execute the vulnerability.
TARGET:
A URL starting with 'http://' or 'https://'
Examples:
python3 CVE-2023-37979.py https://vulnsite.com
python3 CVE-2023-37979.py --exploit https://vulnsite.com
1️⃣ The script checks if Ninja-forms is installed and determines its version.
2️⃣ If vulnerable (<= 3.6.25), it generates a PoC HTML file containing the exploit payload.
3️⃣ If the --exploit flag is used, the PoC file automatically opens in the browser for testing.
⚠️ Disclaimer This script is intended for educational and ethical security testing purposes only. Unauthorized testing is illegal. The author assumes no responsibility for misuse.
📜 References 🔗 Patchstack - Ninja Forms XSS Advisory 🔗 Exploit-DB