CVE-2023-30256

Webkul Qloapps 1.5.2 - Cross-Site Scripting XSS Webkul QloApps 1.5.2: vulnerabile a XSS su due parametri emailcreate e back Exploit - Prova di concetto POC XXS: parametro 'back' Payload Parameter back – Plain text: xss onfocus=alert1 autofocus= xss Payload Parameter back – URL Encoded:...