{"vulnerability": "CVE-2020-26563", "sightings": [{"uuid": "db100e1a-7521-4d3f-a819-7bf89eba0861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26563", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/806", "content": "CVE-2020-26563 ObjectPlanet Opinio 7.12 XSS\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-26563_ObjectPlanet_Opinio_7.12_XSS%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-09-21T04:42:01.000000Z"}, {"uuid": "3255e775-f3f9-48c5-afd5-99b3e7f25fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26563", "type": "seen", "source": "https://t.me/hacking_Attack/18220", "content": "Exploit Collector\nObjectPlanet Opinio 7.12 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png ObjectPlanet Opinio version 7.12 suffers from reflective and persistent cross site scripting vulnerabilities.\n\nMD5 | 9b86eabdb364ff978a10f286fc4d44d6Download # Exploit Title: ObjectPlanet Opinio 7.12 allows Cross-Site Scripting\n# Vendor Homepage: https://www.objectplanet.com/opinio/\n# Software Link: https://www.objectplanet.com/opinio/\n# Exploit Authors: Ang Kar Min (https://www.linkedin.com/in/karmin-ang)\n# CVE: CVE-2020-26563\n\n# Timeline\n- September 2019:  Initial discovery\n- July 2020:  Reported to ObjectPlanet\n- August 2020:  Fix/patch provided by ObjectPlanet\n- July 2021:  Published CVE-2020-26563\n\n# 1. Introduction\nOpinio is a survey management solution by ObjectPlanet that allows surveys to be designed, published and managed.\n\n# 2. Vulnerability Details\nObjectPlanet Opinio before version 7.13 is vulnerable to stored Cross-Site Scripting (Stored XSS) and reflected Cross-Site Scripting (Reflected XSS).\n\n# 3. Proof of Concept\n\n### Reflected XSS executed in URL ###\n\nThe following payload was executed when injected as part of the URL\"/survey/admin/surveyAdmin.do?action=viewSurveyAdmin&surveyId=1234\":\n\n\u201c&zwzc4%22%3e%3cinput%20type%3dtext%20autofocus%20onfocus%3dconfirm(1)%2f%2f\u201d \n\nAffected URL:/survey/admin/surveyAdmin.do?\n### Stored XSS ###\n\nStored XSS payload such as \u201c can be saved in various parameter fields. The malicious payload is executed when a user visits a page that preview or published the payloads.\n\nStored XSS payload such \u201c can be saved in various parameter fields and executed when a user visits a page where the payload is retrieved. For example, a survey question can be created as part of a survey to store the malicious payload. When this survey previewed, the payload will be retrieved and trigger the XSS vulnerability. \n\nThis stored XSS vulnerability affects any page where the affected parameters are accepted and triggered similarly as described in the previous example.\nAffected URL(s) and Parameter(s):\n- /survey/admin/question.do \n'questionText', 'ratingMinText', 'ratingMaxText', 'ratingNALabel', 'multMinError', 'numError', 'numPrefix', 'numPostfix', 'numReqError', 'dropdownLabel',  parameters\n\n- /survey/admin/section.do \n'title' parameter\n\n- /survey/admin/sectionText.do \n'text' parameter\n\n- /survey/admin/plugin.do \n'plugin_survey_closed_message', 'plugin_restrict_nrics', '&plugin_survey_email_content' parameter\n\n- /survey/admin/confirm.do \n'confirmMessageKeyParam', \u2018org.apache.struts.taglib.html.TOKEN\u2019 parameter\n\n- /survey/admin/folder.do \n'msgKey' parameter\n\n- /survey/admin/file.do \n'resourceName', \u2018resourcePath\u2019 parameter\n\n- /survey/admin/setup.do \n'characterEncoding', 'emailForErrors', 'fromEmail', 'language', 'systemBaseUrl' parameters\n\n- /survey/admin/questionList.do?action=viewQuestionList&surveyId=1806 \narbitrarily supplied URL parameter\n\n- /survey/admin/resources.do?action=viewResourcesByType&resourceType=8&fileListType=6125&selectedPreviewLocation=&selectedPreviewHeight=&selectedPreviewWidth=&selectedRadioId=select1_\u00a9ToPosition=-1&isSimpleLayout=false \narbitrarily supplied URL parameter\n\n- /survey/admin/surveyAdmin.do?action=viewSurveyAdmin&surveyId=3404&isPoll=1 \narbitrarily supplied URL parameter\n# 4. Remediation\nApply the latest fix/patch from objectplanet.\n\n# 5. Credits\nAng Kar Min (https://www.linkedin.com/in/karmin-ang) Source:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:30.656991Z"}, {"uuid": "11dae5a7-430d-4e34-bb55-f66369d0930c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26563", "type": "seen", "source": "https://t.me/hacking_Attack/18220", "content": "Exploit Collector\nObjectPlanet Opinio 7.12 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png ObjectPlanet Opinio version 7.12 suffers from reflective and persistent cross site scripting vulnerabilities.\n\nMD5 | 9b86eabdb364ff978a10f286fc4d44d6Download # Exploit Title: ObjectPlanet Opinio 7.12 allows Cross-Site Scripting\n# Vendor Homepage: https://www.objectplanet.com/opinio/\n# Software Link: https://www.objectplanet.com/opinio/\n# Exploit Authors: Ang Kar Min (https://www.linkedin.com/in/karmin-ang)\n# CVE: CVE-2020-26563\n\n# Timeline\n- September 2019:  Initial discovery\n- July 2020:  Reported to ObjectPlanet\n- August 2020:  Fix/patch provided by ObjectPlanet\n- July 2021:  Published CVE-2020-26563\n\n# 1. Introduction\nOpinio is a survey management solution by ObjectPlanet that allows surveys to be designed, published and managed.\n\n# 2. Vulnerability Details\nObjectPlanet Opinio before version 7.13 is vulnerable to stored Cross-Site Scripting (Stored XSS) and reflected Cross-Site Scripting (Reflected XSS).\n\n# 3. Proof of Concept\n\n### Reflected XSS executed in URL ###\n\nThe following payload was executed when injected as part of the URL\"/survey/admin/surveyAdmin.do?action=viewSurveyAdmin&surveyId=1234\":\n\n\u201c&zwzc4%22%3e%3cinput%20type%3dtext%20autofocus%20onfocus%3dconfirm(1)%2f%2f\u201d \n\nAffected URL:/survey/admin/surveyAdmin.do?\n### Stored XSS ###\n\nStored XSS payload such as \u201c can be saved in various parameter fields. The malicious payload is executed when a user visits a page that preview or published the payloads.\n\nStored XSS payload such \u201c can be saved in various parameter fields and executed when a user visits a page where the payload is retrieved. For example, a survey question can be created as part of a survey to store the malicious payload. When this survey previewed, the payload will be retrieved and trigger the XSS vulnerability. \n\nThis stored XSS vulnerability affects any page where the affected parameters are accepted and triggered similarly as described in the previous example.\nAffected URL(s) and Parameter(s):\n- /survey/admin/question.do \n'questionText', 'ratingMinText', 'ratingMaxText', 'ratingNALabel', 'multMinError', 'numError', 'numPrefix', 'numPostfix', 'numReqError', 'dropdownLabel',  parameters\n\n- /survey/admin/section.do \n'title' parameter\n\n- /survey/admin/sectionText.do \n'text' parameter\n\n- /survey/admin/plugin.do \n'plugin_survey_closed_message', 'plugin_restrict_nrics', '&plugin_survey_email_content' parameter\n\n- /survey/admin/confirm.do \n'confirmMessageKeyParam', \u2018org.apache.struts.taglib.html.TOKEN\u2019 parameter\n\n- /survey/admin/folder.do \n'msgKey' parameter\n\n- /survey/admin/file.do \n'resourceName', \u2018resourcePath\u2019 parameter\n\n- /survey/admin/setup.do \n'characterEncoding', 'emailForErrors', 'fromEmail', 'language', 'systemBaseUrl' parameters\n\n- /survey/admin/questionList.do?action=viewQuestionList&surveyId=1806 \narbitrarily supplied URL parameter\n\n- /survey/admin/resources.do?action=viewResourcesByType&resourceType=8&fileListType=6125&selectedPreviewLocation=&selectedPreviewHeight=&selectedPreviewWidth=&selectedRadioId=select1_\u00a9ToPosition=-1&isSimpleLayout=false \narbitrarily supplied URL parameter\n\n- /survey/admin/surveyAdmin.do?action=viewSurveyAdmin&surveyId=3404&isPoll=1 \narbitrarily supplied URL parameter\n# 4. Remediation\nApply the latest fix/patch from objectplanet.\n\n# 5. Credits\nAng Kar Min (https://www.linkedin.com/in/karmin-ang) Source:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:05.327848Z"}]}