JobSeeker 1.5 Cross Site Scripting

`# Exploit Title: JobSeeker 1.5 - Reflected XSS  
# Exploit Author: CraCkEr  
# Date: 15/07/2023  
# Vendor: phpscriptpoint  
# Vendor Homepage: https://phpscriptpoint.com/  
# Software Link: https://demo.phpscriptpoint.com/jobseeker/  
# Tested on: Windows 10 Pro  
# Impact: Manipulate the content of the site  
  
  
  
## Description  
  
The attacker can send to victim a link containing a malicious URL in an email or instant message  
can perform a wide variety of actions, such as stealing the victim's session token or login credentials  
  
  
  
Path: /jobseeker/search-result.php  
  
GET parameter 'kw' is vulnerable to RXSS  
GET parameter 'lc' is vulnerable to RXSS  
GET parameter 'ct' is vulnerable to RXSS  
GET parameter 'cp' is vulnerable to RXSS  
GET parameter 'p' is vulnerable to RXSS  
  
  
https://website/jobseeker/search-result.php?kw=[XSS]&lc=[XSS]&ct=[XSS]&cp=[XSS]&p=[XSS]  
  
  
  
[-] Done  
`