CE Phoenix版本1.0.8.20-存储的XSS

[HackApt-37 Team已验证会员]

＃利用标题: CE Phoenix版本1.0.8.20-存储的XSS
＃日期: 2023-11-25
＃利用作者: TMRSWRR
＃类别: WebApps
＃供应商homepage: https://phoenixcart.org/
＃版本: v3.0.1
＃测试在: https://www.softaculous.com/apps/ecommerce/ce_phoenix
## POC:
1-login Admin面板，转到此URL : https://demos6.softaculous.com/ce_phoenixx3r6jqi4kl/admin/currencies.php
2点键编辑和写入标题字段您的有效载荷: SVG/holly=1 onload=确认（1）//
3-save it并转到此URL : https://demos6.softaculous.com/ce_phoenixx3r6jqi4kl/admin/currencies.php
4您将看到警报按钮

 

H

Pyrocms v3.0.1-存储的XSS

H

Chyrp 2.5.2-存储的跨站点脚本（XSS）