CVE-2023-XXXX: Sassy Social Share Plugin XSS Vulnerability

Description

This project demonstrates a reflected Cross-Site Scripting (XSS) vulnerability found in the Sassy Social Share plugin for WordPress. This vulnerability can be exploited via the heateor_mastodon_share parameter.

Usage

1. PoC.html: This file is prepared to demonstrate the XSS vulnerability. You can observe how the vulnerability works by opening it in your browser.
2. exploit.py: This Python script checks whether the vulnerability has been exploited by sending a request to the target URL. You can run it by following the steps below:
   • Make sure Python and the required libraries are installed.
   • Use the python exploit.py command in the terminal to run the script.

Requirements

• Python 3.x
• requests library (install with pip install requests)

Warning

This type of PoC should only be used for security research and educational purposes. Performing unauthorized tests on any system is against the law. Please follow ethical hacking rules and only test on authorized systems.

Contributing

If you would like to contribute to this project, please submit a pull request or report your issues.

Contact

If you have any questions or suggestions, you can contact me:

• My LinkedIn Profile

License

This project is licensed under the MIT License.