Description
SnipCommand 0.1.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into command snippets. Attackers can execute arbitrary code by embedding malicious JavaScript that triggers remote command execution through file or title inputs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| gurayyarar | SnipCommand | 0.1.0 | — |
References
- ExploitDB-49829 exploit
- SnipCommand GitHub Repository product
- Proof of Concept Video exploit
- VulnCheck Advisory: SnipCommand 0.1.0 - Persistent Cross-Site Scripting third-party-advisory