CVEs-PoC/2021/CVE-2021-43633.md

CVE-2021-43633

Description

Sourcecodester Messaging Web Application 1.0 is vulnerable to stored XSS. If a sender inserts valid scripts into the chat, the script will be executed on the receiver chat.

POC

Reference

• https://medium.com/@shaunwhorton/how-i-found-two-different-xss-vulnerabilities-a491144e8494

Github

• https://github.com/ARPSyndicate/cvemon