Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2020-28927

Description

There is a Stored XSS in Magicpin v2.1 in the User Registration section. Each time an admin visits the manage user section from the admin panel, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.

POC

Reference

- https://akshayj0111.medium.com/cve-2020-28927-6f64c25239bb

Github

No PoCs found on GitHub currently.