CVEs-PoC/2019/CVE-2019-13633.md

CVE-2019-13633

Description

Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can send arbitrary JavaScript code via a built-in communication channel, such as Telegram, WhatsApp, Viber, Skype, Facebook, Vkontakte, or Odnoklassniki. This is mishandled within the administration panel for conversations/all, conversations/inbox, conversations/unassigned, and conversations/closed.

POC

Reference

• https://github.com/Security-AVS/CVE-2019-13633

Github

• https://github.com/Security-AVS/CVE-2019-13633
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/hectorgie/PoC-in-GitHub