Learning And Examination Management System Script 2.3.1 XSS

`#######################################################  
# Exploit Title: Learning and Examination Management System Script 2.3.1 a Stored XSS  
# Date: 09.02.2018  
# Vendor Homepage: https://www.phpscriptsmall.com/  
# Software Link: https://www.phpscriptsmall.com/product/learning-examination-management-system/  
# Category: Web Application  
# Exploit Author: Prasenjit Kanti Paul  
# Web: http://hack2rule.wordpress.com/  
# Version: 2.3.1  
# Tested on: Linux Mint  
# CVE: CVE-2018-6866  
#######################################################  
  
Proof of Concept  
-----------------  
1. Login into the site  
2. Goto aMessagea options  
3. Put <script>alert("PKP")</script> as message / reply message  
4. You will be having a popup aPKPa  
  
`