# Exploit Title: House Rental and Property Listing 1.0 - Multiple Stored XSS  
# Tested on: Windows 10  
# Exploit Author: Mohamed habib Smidi (Craniums)  
# Date: 2020-12-28  
# Google Dork: N/A  
# Vendor Homepage:  
# Software Link:  
# Affected Version: Version 1  
# Patched Version: Unpatched  
# Category: Web Application  
Step 1: Create a new user then login  
Step 2: Click on "Register" page to register a room.  
Step 3: input "<script>alert("Full name")</script>" in all fields each one with the field name except phone number, alternate number.  
Note: for the email address you can inspect elements and change the type from email to text.  
Step 4: Once all fields are completed, Click on Submit  
Step 5: From the home page click on Details/Update, This will trigger all Stored XSS payloads one after the other.