We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Exploit Title: XSS Stored Vulnerability in WBCE Version: 1.5.4 Date: 04/11/2022 Exploit Author: Gozan Contact: https://github.com/gozan10 Product: WBCE CMS (https://github.com/WBCE/WBCE_CMS) Vendor: WBCE CMS Description: XSS Stored exitst in Section Footer field allow attacker excute arbitrary web script
First choose Settings and find Search Settings field then choose button Show Advanced Options. In the section Footer field write payload XSS.
After finish click button PC in Pages then type search and press search button
Excute javascript code
The text was updated successfully, but these errors were encountered:
No branches or pull requests
Exploit Title: XSS Stored Vulnerability in WBCE Version: 1.5.4
Date: 04/11/2022
Exploit Author: Gozan
Contact: https://github.com/gozan10
Product: WBCE CMS (https://github.com/WBCE/WBCE_CMS)
Vendor: WBCE CMS
Description: XSS Stored exitst in Section Footer field allow attacker excute arbitrary web script
First choose Settings and find Search Settings field then choose button Show Advanced Options.
![image](https://user-images.githubusercontent.com/70020521/199878482-34f015af-fd8a-4453-a682-ea655fa0e875.png)
In the section Footer field write payload XSS.
After finish click button PC in Pages then type search and press search button
![image](https://user-images.githubusercontent.com/70020521/199878643-1786342a-a79b-4735-bb93-0e43d48c44fe.png)
Excute javascript code
![image](https://user-images.githubusercontent.com/70020521/199878757-1ac1d482-30a6-4371-9670-76812bf4dd17.png)
The text was updated successfully, but these errors were encountered: