CVE-2012-0984

The exploit demonstrates multiple XSS vulnerabilities in XOOPS 2.5.4 by injecting malicious scripts via unsanitized POST parameters in various endpoints. Each PoC uses a form submission to trigger the XSS payload, confirming the vulnerability.

This exploit demonstrates multiple XSS vulnerabilities in XOOPS by injecting malicious scripts into form inputs. The PoC shows how unsanitized user input in parameters like 'current_file', 'imgcat_id', and 'target' can lead to arbitrary JavaScript execution.

This exploit demonstrates a stored XSS vulnerability in XOOPS 2.5.4 by injecting malicious JavaScript into the 'to_userid' parameter of the private messaging module. The PoC form submits a payload that executes arbitrary script code in the context of the affected site.