header-logo
Suggest Exploit
vendor:
Vanilla Poll 0.9
by:
Henry Hoggard
3,3
CVSS
MEDIUM
Stored XSS
79
CWE
Product Name: Vanilla Poll 0.9
Affected Version From: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9
Affected Version To: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9
Patch Exists: N/A
Related CWE: N/A
CPE: vanillaforums.org/download
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2012

Vanilla Poll 0.9 Stored XSS

To create the XSS firstly create a new thread. Once the thread is made press attach the poll and either enter the XSS in the title or the answers of the poll. The XSS I used is <script>alert('xss')</script>

Mitigation:

User input should be validated and filtered to prevent malicious code from being executed.
Source

Exploit-DB raw data:

# Title: Vanilla Poll 0.9 Stored XSS
# Date: 1/6/12
# Author: Henry Hoggard
# Author URL: henryhoggard.co.uk
# Author Twitter: @henryhoggard
# Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9
# http://vanillaforums.org/download
# http://vanillaforums.org/addon/poll-plugin

# Exploit-DB Note:
# User must have proper privileges to attach
# a poll to a discussion

To create the XSS firstly create a new thread.
Once the thread is made press attach the poll and either enter the XSS in the title or the answers of the poll.

The XSS I used is
<script>alert('xss')</script>

#############################################################

Navigation

Suggest Exploit

Services By CQR