Composr CMS 10.0.36 - Cross Site Scripting Vulnerability

Exploit Title: Composr CMS 10.0.36 - Cross Site Scripting Exploit Author: Orion Hridoy Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.36 Tested on: Windows/Linux CVE : CVE-2021-30150 Vulnerable Endpoint:...

Composr CMS 10.0.36 Cross Site Scripting

Exploit Title: Composr CMS 10.0.36 - Cross Site Scripting Date: 04/06/2021 Exploit Author: Orion Hridoy Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.36 Tested on: Windows/Linux CVE : CVE-2021-30150 Vulnerable Endpoint:...

Composr CMS 10.0.36 - Cross Site Scripting

Exploit Title: Composr CMS 10.0.36 - Cross Site Scripting Date: 04/06/2021 Exploit Author: Orion Hridoy Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.36 Tested on: Windows/Linux CVE : CVE-2021-30150 Vulnerable Endpoint:...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-30150

CVE-2021-30150 affects Composr 10.0.36, with a stored/reflected XSS in an XML script via the vulnerable endpoint data/ajax_tree.php?hook=choose_gallery... where a crafted XML/HTML-like payload can execute script code in the context of the page. Public writeups (PacketStorm exploit article and Exp...