header-logo
Suggest Exploit
vendor:
crea8social
by:
Halil Dalabasmaz
7,5
CVSS
HIGH
Stored XSS
79
CWE
Product Name: crea8social
Affected Version From: v1.3
Affected Version To: v1.3
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Chrome & Iceweasel
2014

crea8social 1.3 Stored XSS Vulnerability

Create a page from 'Pages' (/pages) section. 'Page Website' input is not secure. You can run XSS payloads on 'Page Website' input.

Mitigation:

Filter the input field against to XSS attacks.
Source

Exploit-DB raw data:

# Exploit Title: crea8social 1.3 Stored XSS Vulnerability
# Date: 24-10-2014
# Exploit Author: Halil Dalabasmaz
# Version: v1.3
# Vendor Homepage: http://codecanyon.net/item/crea8social-php-social-networking-platform-v13/9211270
# Tested on: Chrome & Iceweasel

# Vulnerability Description:

===Stored XSS===
Create a page from "Pages" (/pages) section. "Page Website" input is not secure. You can run XSS payloads on "Page Website" input.

Sample Payload for Stored XSS: http://example.com/">[xssPayload]

=Solution=
Filter the input field against to XSS attacks.
================

Navigation

Suggest Exploit

Services By CQR