bigzooooz/CVE-2022-31298

Haraj Script 3.7 - Authenticated Stored XSS

CVE-2022-31298

Haraj Script 3.7 - Authenticated Stored XSS

Exploit Title: Haraj Script 3.7 - Authenticated Stored XSS

Date: 2022-06-13

CVE: CVE-2022-31298

Exploit Author: Abdulaziz Saad (@b4zb0z)

Vendor Homepage: https://angtech.org/

Software Link: https://angtech.org/product/view/3

Version: 3.7

Tested on: LAMP, Ubuntu

---

[#] Exploitation : exploit ads comment section directly with js payload