{"uuid": "69ff0fea-fa94-4e09-a3b1-c0f523291a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41731", "type": "seen", "source": "https://t.me/hacking_Attack/69204", "content": "Exploit Collector\nNews247 News Magazine 1.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-42b-8Yu8ql4/WWlvfoDuyhI/AAAAAAAAIQE/GMGQD7Uo7DMncRccI_LNcWgfvYRkd0zwQCLcBGAs/s1600/h86.png \nNews247 News Magazine version 1.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 0ea0c812171a55c5cffd9cd5752f28312a1e018fc62d7680951d7ba32234f7be\n\nDownload\n# Exploit Title: News247 - News Magazine (CMS) v1.0 \u2013 Stored Cross Site Scripting (XSS) \n# Exploit Author: Ravinder Verma \n# Date: Septmeber 14, 2022 \n# Vendor Homepage: https://www.sourcecodester.com/php/14952/news247-news-magazine-php-script.html \n# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/news247.zip \n# Tested on: Kali Linux, Apache, Mysql \n# Vendor: 255programmer \n# Version: v1.0 \n# CVE [Reserved] : CVE-2021-41731 \n# Exploit Description:\n\n#   News247 - News Magazine (CMS) v1.0 suffers from a stored cross site\nscripting (XSS) Vulnerability. Admin can publish blogs under various\ncategories. When creating new \"blog category\", if admin give malicious\npayload like *\"\">x * into the\ncategory name field and publish that blog. Then it allows you to execute\narbitrary JavaScript in the context of the whole user who visited that\npage. It can be abused to steal session cookies, perform requests in the\nname of the victim or for phishing attacks.\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:23.074982Z"}