1 Support questions or comments

• 
  3 months ago
  0xskalvin

  hello, please how i can contact with the support team of the script i found a vulnerability and i want to share it to make a patch
• View 1 more reply
• 
  3 months ago
  abhicodebox Author

  ok tell me we are the support team
• 
  3 months ago
  0xskalvin

  ## Description
  
  Attacker can send to victim a link containing a malicious URL in an email or instant message
  can perform a wide variety of actions, such as stealing the victim's session token or login credentials
  
  
  Path:
  
  /search
  
  
  GET parameter 'q' is vulnerable to XSS
  
  
  Live POC:
  
  https://modernshop.apps.5g.in/search?q=1bwkni%3e%3cscript%3ealert(1)%3c%2fscript%3ehu1c6
  
  Payload:
  
  bwkni><script>alert(1)</script>hu1c6
  
  
  
  [-] Done
• 
  3 months ago
  abhicodebox Author

  ok thanks for your help we fix that issue
• 
  3 months ago
  0xskalvin

  You are welcome
  can you please tell me the software version of ModernShop before the fix?