CVE-2023-30256

Webkul Qloapps 1.5.2 - クロスサイトスクリプティング XSS Webkul QloApps 1.5.2: 2つのパラメータ（emailcreate と back）でXSSに対して脆弱です エクスプロイト - 概念実証（POC） XXS: 'back' パラメータ Payload Parameter back – Plain text: xss onfocus=alert1 autofocus= xss Payload Parameter back – URL Encoded: xss%20onfocus%3dalert1%20autofocus%3d%20xss...

CVE-2023-36289: Improper Neutralization of Input During Web Page Generation

An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST emailcreate and back parameter...

Webkil QloApps 跨站脚本漏洞

Webkil QloApps is free open source hotel booking and online reservation system. A security vulnerability exists in Webkil QloApps version v.1.5.2. An attacker exploits the vulnerability to obtain sensitive information via the back and emailcreate parameters in the AuthController.php file...

CVE-2023-30256: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and emailcreate parameters in the AuthController.php file...

Exploit for Cross-site Scripting in Webkul Qloapps

Webkul Qloapps 1.5.2 - Cross-Site Scripting XSS Webkul QloAp...