{"vulnerability": "cve-2022-30003", "sightings": [{"uuid": "7764ba47-4642-42a5-9395-e7798a572b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-30003", "type": "seen", "source": "https://t.me/cibsecurity/50524", "content": "\u203c CVE-2022-30003 \u203c\n\nSourcecodester Online Market Place Site 1.0 is vulnerable to Cross Site Scripting (XSS), allowing attackers to register as a Seller then create new products containing XSS payloads in the 'Product Title' and 'Short Description' fields.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T22:22:45.000000Z"}, {"uuid": "bd472e83-2b58-4293-8a0e-394dba4bde04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-30003", "type": "seen", "source": "https://t.me/hacking_Attack/68002", "content": "Exploit Collector\nOnline Market Place Site 1.0 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \nOnline Market Place Site version 1.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 6dbdfadfd046c1d428d90778b682265b97787399b579cf8c236ae782a910255b\n\nDownload\n# Exploit Title: Online Market Place Site v1.0 - Stored Cross-Site Scripting (XSS)\n# Exploit Author: Joe Pollock\n# Date: September 03, 2022\n# Vendor Homepage: https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html\n# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/omps.zip\n# Tested on: Kali Linux, Apache, Mysql\n# CVE: CVE-2022-30003 (RESERVED)\n# Vendor: oretnom23\n# Version: v1.0\n# Exploit Description:\n#   Online Market Place Site v1.0 suffers from an authenticated stored Cross-Site Scripting (XSS) vulnerability allowing attackers to register\n#   as a Seller then create new products containing XSS payloads in the 'Product Title' and 'Short Description' fields.\n\nTo reporduce:\n\n1. Sign as a Seller (or create an account) then add a product by navigating to 'Products' > 'Add New'.\n\n2. Add an XSS payload (e.g. ) within the 'Product Title' and/or 'Short Description' fields.\n\n3. Click 'SAVE' - the XSS payload(s) will be executed immediately or anytime the product is viewed.\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:25.093791Z"}, {"uuid": "81368517-18b1-4d55-9be7-e29908322a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-30003", "type": "seen", "source": "https://t.me/hacking_Attack/68002", "content": "Exploit Collector\nOnline Market Place Site 1.0 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \nOnline Market Place Site version 1.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 6dbdfadfd046c1d428d90778b682265b97787399b579cf8c236ae782a910255b\n\nDownload\n# Exploit Title: Online Market Place Site v1.0 - Stored Cross-Site Scripting (XSS)\n# Exploit Author: Joe Pollock\n# Date: September 03, 2022\n# Vendor Homepage: https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html\n# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/omps.zip\n# Tested on: Kali Linux, Apache, Mysql\n# CVE: CVE-2022-30003 (RESERVED)\n# Vendor: oretnom23\n# Version: v1.0\n# Exploit Description:\n#   Online Market Place Site v1.0 suffers from an authenticated stored Cross-Site Scripting (XSS) vulnerability allowing attackers to register\n#   as a Seller then create new products containing XSS payloads in the 'Product Title' and 'Short Description' fields.\n\nTo reporduce:\n\n1. Sign as a Seller (or create an account) then add a product by navigating to 'Products' > 'Add New'.\n\n2. Add an XSS payload (e.g. ) within the 'Product Title' and/or 'Short Description' fields.\n\n3. Click 'SAVE' - the XSS payload(s) will be executed immediately or anytime the product is viewed.\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:39.429832Z"}, {"uuid": "c2a3a75c-f971-43c0-aca0-18bf77f08a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-30003", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/68002", "content": "Exploit Collector\nOnline Market Place Site 1.0 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \nOnline Market Place Site version 1.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 6dbdfadfd046c1d428d90778b682265b97787399b579cf8c236ae782a910255b\n\nDownload\n# Exploit Title: Online Market Place Site v1.0 - Stored Cross-Site Scripting (XSS)\n# Exploit Author: Joe Pollock\n# Date: September 03, 2022\n# Vendor Homepage: https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html\n# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/omps.zip\n# Tested on: Kali Linux, Apache, Mysql\n# CVE: CVE-2022-30003 (RESERVED)\n# Vendor: oretnom23\n# Version: v1.0\n# Exploit Description:\n#   Online Market Place Site v1.0 suffers from an authenticated stored Cross-Site Scripting (XSS) vulnerability allowing attackers to register\n#   as a Seller then create new products containing XSS payloads in the 'Product Title' and 'Short Description' fields.\n\nTo reporduce:\n\n1. Sign as a Seller (or create an account) then add a product by navigating to 'Products' > 'Add New'.\n\n2. Add an XSS payload (e.g. ) within the 'Product Title' and/or 'Short Description' fields.\n\n3. Click 'SAVE' - the XSS payload(s) will be executed immediately or anytime the product is viewed.\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T10:00:04.466178Z"}, {"uuid": "dc2e25ab-c300-44ed-9d51-c595ba14dcda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-30003", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/68002", "content": "Exploit Collector\nOnline Market Place Site 1.0 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \nOnline Market Place Site version 1.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | 6dbdfadfd046c1d428d90778b682265b97787399b579cf8c236ae782a910255b\n\nDownload\n# Exploit Title: Online Market Place Site v1.0 - Stored Cross-Site Scripting (XSS)\n# Exploit Author: Joe Pollock\n# Date: September 03, 2022\n# Vendor Homepage: https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html\n# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/omps.zip\n# Tested on: Kali Linux, Apache, Mysql\n# CVE: CVE-2022-30003 (RESERVED)\n# Vendor: oretnom23\n# Version: v1.0\n# Exploit Description:\n#   Online Market Place Site v1.0 suffers from an authenticated stored Cross-Site Scripting (XSS) vulnerability allowing attackers to register\n#   as a Seller then create new products containing XSS payloads in the 'Product Title' and 'Short Description' fields.\n\nTo reporduce:\n\n1. Sign as a Seller (or create an account) then add a product by navigating to 'Products' > 'Add New'.\n\n2. Add an XSS payload (e.g. ) within the 'Product Title' and/or 'Short Description' fields.\n\n3. Click 'SAVE' - the XSS payload(s) will be executed immediately or anytime the product is viewed.\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:50.431368Z"}]}