CyberRota Analysis
AI-GeneratedThe vulnerability allows authenticated users of maalfer Pentestify versions 1.2.0 to 2.3.2 to bypass the CSS sanitizer, enabling them to craft malicious CSS that forces outbound HTTP requests from other users' browsers. This can lead to the disclosure of sensitive information, such as IP addresses and User-Agent strings. Organizations using these versions should prioritize remediation to protect user privacy and prevent potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex escapes that reconstruct the url() function and evade the sanitizer blocklist