Resumes Management And Job Application Website 1.0 Cross Site Scripting

Resumes Management and Job Application Website version 1.0 suffers from multiple persistent cross site scripting vulnerabilities.

MD5 | ff455771a934d45b23ddf81b4813f13f

# Exploit Title: Multiple Stored XSS in
# Date: 2/1/2021
# Exploit Author: Saswat Subhajyoti Mallick
# Vendor Homepage:
# Software Link:
# Version: 1.0
# Tested on: windows 10/wamp

Attacker can put stored xss and gain admin access unauthenticated .
For stored XSS poc

simply put <script>alert(1)</script> in first name,last name and
address field while applying for resume.

Stored XSS will be activated the moment admin user logs in.

Related Posts