CVE-2023-31703

This exploit demonstrates a reflected XSS vulnerability in eScan Management Console 14.0.1400.2281. The payload is injected via the 'from' parameter in the URL, leading to arbitrary JavaScript execution in the context of the victim's session.

This repository documents a reflected XSS vulnerability in eScan Management Console 14.0.1400.2281, where the 'from' parameter in the edit user form is vulnerable to script injection. The PoC demonstrates cookie theft via a crafted URL.