News247 News Magazine 1.0 Cross Site Scripting Vulnerability

🗓️ 16 Sep 2022 00:00:00Reported by Ravinder VermaType

zdt🔗 0day.today👁 270 Views

News247 v1.0 CMS Stored XSS Vulnerability - Publish malicious payload in blog category name to execute arbitrary JavaScript

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-41731	16 Sep 202220:29	–	circl
CNNVD	News247 跨站脚本漏洞	15 Sep 202200:00	–	cnnvd
CVE	CVE-2021-41731	16 Sep 202216:18	–	cve
Cvelist	CVE-2021-41731	16 Sep 202216:18	–	cvelist
EUVD	EUVD-2021-28743	3 Oct 202520:07	–	euvd
NVD	CVE-2021-41731	16 Sep 202217:15	–	nvd
OSV	CVE-2021-41731	16 Sep 202217:15	–	osv
Packet Storm	News247 News Magazine 1.0 Cross Site Scripting	15 Sep 202200:00	–	packetstorm
Prion	Cross site scripting	16 Sep 202217:15	–	prion
RedhatCVE	CVE-2021-41731	9 Jan 202611:36	–	redhatcve

# Exploit Title: News247 - News Magazine (CMS) v1.0 – Stored Cross Site Scripting (XSS) 
# Exploit Author: Ravinder Verma 
# Vendor Homepage: https://www.sourcecodester.com/php/14952/news247-news-magazine-php-script.html 
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/news247.zip 
# Tested on: Kali Linux, Apache, Mysql 
# Vendor: 255programmer 
# Version: v1.0 
# CVE [Reserved] : CVE-2021-41731 
# Exploit Description:

#   News247 - News Magazine (CMS) v1.0 suffers from a stored cross site
scripting (XSS) Vulnerability. Admin can publish blogs under various
categories. When creating new "blog category", if admin give malicious
payload like *""><img src=x onerror=alert(document.cookie)>* into the
category name field and publish that blog. Then it allows you to execute
arbitrary JavaScript in the context of the whole user who visited that
page. It can be abused to steal session cookies, perform requests in the
name of the victim or for phishing attacks.

16 Sep 2022 00:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.14.8

EPSS0.00335