PluXML 5.8.7 Cross Site Scripting

Exploit Title: XSS-Stored on PluXML 5.8.7 - latest parameter "idcontent" Author: nu11secur1ty Testing and Debugging: nu11secur1ty Date: 08.13.2021 Vendor: https://pluxml.org/ Link: https://sourceforge.net/projects/chikitsa/ CVE: CVE-2021-38603 + Exploit Source: !/usr/bin/python3 Author:...

CVE-2021-38603

CVE-2021-38603 affects PluXML 5.8.7. The stored XSS vulnerability is in core/admin/profil.php via the Information field (parameter ID: id_content per public exploit). Underlying issue: stored cross-site scripting that could allow an attacker to inject arbitrary script when data is stored in Infor...