UWA 2.X v2.1.5 multiple storage xss

UWA 2.X v2.1.5 multiple storage xss

First

Submit an article. The author does not filter double quotation marks.
 

Onfocusin = alert (0) autofocus x ="

Triggered during Administrator review
 

Second place.

Capture packets and modify article content
 

The line feed bypasses the regular expression ..

 

Trigger.





After obtaining the cookie, you can directly edit the php template in the background and directly getshell

 

Solution:

Repair xss