header-logo
Suggest Exploit
vendor:
OroCRM
by:
Provensec Labs
8,8
CVSS
HIGH
XSS Stored
79
CWE
Product Name: OroCRM
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020

OroCRM XSS Stored Vulnerability

Goto http://server add a new lead fill all the fields properly but Fill the email filed with xss payload as given in the screenshot. payload used '><img src=d onerror=confirm(/provensec/);>. click save and close button. Now goto the leads list page. click on the lead which we have created. XSS payload will be executed.

Mitigation:

Ensure that user input is properly sanitized and validated before being used in the application.
Source

Exploit-DB raw data:

# Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your commerce business. It's the CRM built for both sales and marketing!
# Discovered by: Provensec
# Website: http://www.provensec.com
# Author: Provensec Labs
# Type of vulnerability: XSS Stored
# Description:

1 Goto http://server add a new lead fill all the fields properly but Fill the email filed with xss payload  as given in the screenshot
http://prntscr.com/4lf043 

payload used "><img src=d onerror=confirm(/provensec/);>

2 click save and close button

http://prntscr.com/4lf0ej

Navigation

Suggest Exploit

Services By CQR