Lucene search

K
huntrBisiceteaC6B29E46-02E0-43AD-920F-28AC482EA2AB
HistoryJun 02, 2023 - 4:05 p.m.

Stored XSS on user's name

2023-06-0216:05:22
bisicetea
www.huntr.dev
4
xss
stored
user's name
payload
vulnerability

0.001 Low

EPSS

Percentile

40.7%

Description

Paste the payload XSS into the Name or Last name field. XSS vulnerability will trigger.

Proof of Concept

https://drive.google.com/file/d/1hoZkCxzTQbcIDy28hKJyjyrOD1Pcaaz0/view?usp=sharing

0.001 Low

EPSS

Percentile

40.7%

Related for C6B29E46-02E0-43AD-920F-28AC482EA2AB