Fabio fnatalucci

## inject.py
# 2017 - @leonjza
#
# Wordpress 4.7.0/4.7.1 Unauthenticated Content Injection PoC
# Full bug description: https://blog.sucuri.net/2017/02/content-injection-vulnerability-wordpress-rest-api.html

# Usage example:
#
# List available posts:
#
# $ python inject.py http://localhost:8070/

## index.html
<style>
	/* IMPORTANT - must give map div height */
	#map-canvas {
		height:400px;
	}

	/* IMPORTANT - fixes webkit infoWindow rendering */
	#map-canvas img {
		max-width: none;
	}
	# 2017 - @leonjza
	#
	# Wordpress 4.7.0/4.7.1 Unauthenticated Content Injection PoC
	# Full bug description: https://blog.sucuri.net/2017/02/content-injection-vulnerability-wordpress-rest-api.html

	# Usage example:
	#
	# List available posts:
	#
	# $ python inject.py http://localhost:8070/
	<style>
	/* IMPORTANT - must give map div height */
	#map-canvas {
	height:400px;
	}

	/* IMPORTANT - fixes webkit infoWindow rendering */
	#map-canvas img {
	max-width: none;
	}