October CMS User Plugin 1.4.5 - Persistent Cross-Site Scripting

Author: 0xB9
type: webapps
platform: php
port: 
date_added: 2018-04-26 
date_updated: 2018-04-26 
verified: 0 
codes: CVE-2018-10366 
tags: 
aliases:  
screenshot_url:  
application_url: 

# Exploit Title: October CMS User Plugin v1.4.5 - Persistent Cross-Site Scripting
# Date: 2018-04-03
# Author: 0xB9
# Software Link: https://octobercms.com/plugin/rainlab-user
# Version: 1.4.5
# Tested on: Ubuntu 17.10
# CVE: CVE-2018-10366

#1. Description:
Front-end user management for October CMS. Allows visitors to create a website.

#2. Proof of Concept:

Persistent XSS
- Go to the account page localhost/OctoberCMS/account/
- Register & enter the following for your full name <p """><SCRIPT>alert("XSS")</SCRIPT>">
- You will be alerted everytime you visit the account page localhost/OctoberCMS/account/

#3. Solution:
Update to 1.4.6