cve/2019/CVE-2019-1010207.md

### [CVE-2019-1010207](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010207)
![](https://img.shields.io/static/v1?label=Product&message=Pie%20Register&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Cross%20Site%20Scripting%20(XSS)&color=brighgreen)

### Description

Genetechsolutions Pie Register 3.0.15 is affected by: Cross Site Scripting (XSS). The impact is: Stealing of session cookies. The component is: File: Login. Parameters: interim-login, wp-lang, and supplied URL. The attack vector is: If a victim clicks a malicious link, the attacker can steal his/her account. The fixed version is: 3.0.16.

### POC

#### Reference
- https://0day.today/exploit/31255
- https://packetstormsecurity.com/files/149665/wppieregister3015-xss.txt

#### Github
No PoCs found on GitHub currently.