Miuna Shoutbox XSS vuln.

So someone was doing XSS on my copy of my Miuna Shoutbox and redirected the site to their script kiddie twitter.


I am not really scared as I already knew what he was doing it from, but I was just reporting that this is currently a vulnerable plugin

It would be helpful if you posted how they did it, or what they targeted in the script to allow people to patch it.

Not sure exactly, trying to investigate atm

I understand how XSS are made and how to use an XSS for exploits, it's like a game for a kid.
If they succeed so you are the idiot who helped them to do that (cuz you're the owner)
If you want to correct it just send me the files of the plugin in PM

well I found the exploit they used thinks to pulsey
it was just html code like a meta refresh

You need to fix that XSS Can be dangerous

23-05-2015, 05:50 PM

DarSider Wrote: You need to fix that XSS Can be dangerous

oh wow
I didn't know that

thanks for the information