Reflected XSS in /admin/banner-zone.php (v6.0.0+)

How it was found

Description:

A Reflected Cross-Site Scripting (Reflected XSS) vulnerability. User-supplied input from the banner search fields ("Website") is reflected into the page without proper context-aware encoding

Step:

1. When I create Banners, I click it and click 'Linked Zones'. At that, I insert payload '><script>alert()</script> into 'website' field to search

{F4944389}

2. As a result, the alert statement is executed on the browser.

{F4944394}

Impact

The reflected XSS (demonstrated by "><script>alert(1)</script>) allows execution of attacker-supplied JavaScript in an admin’s browser. This can lead to session theft (if cookies are not HttpOnly), unauthorized admin actions, credential harvesting, and potential full site compromise