Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-41312. — InstantCMS - Stored Cross Site Scripting (XSS) | Kitploit
Tools/GitHubGitHub/amal264882/cve-2024-41312.
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubamal264882/cve-2024-41312.

CVE-2024-41312.

InstantCMS - Stored Cross Site Scripting (XSS)

View Repository
2 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-41312.

InstantCMS - Stored Cross Site Scripting (XSS) Affected Version: InstantCMS 2.16.3

Steps to Reproduce:

  1. Log in to https://demo.instantcms.io as an demo user.
  2. Visit https://demo.instantcms.io/photos/upload.
  3. Upload the image with the embedded payload test <img src="https://raw.githubusercontent.com/amal264882/cve-2024-41312./HEAD/asd" onerror="alert(1)"> in the Camera Model Name meta data filed.
  4. Visit the https://demo.instantcms.io/photos/camera-{payload}
  5. Example: https://demo.instantcms.io/photos/camera-Amal_Test%3Cimg+src=%22asd%22+onerror=%22alert(1)%22%3E
  6. you will observe the immediate execution of the XSS payload.

POC:

<a href=https://d.pr/v/DT8Gve> Video POV

Download Tool