3 .Click edit on ...">Store XSS in Users - vulnerability database | Vulners.com 3 .Click edit on ..."> 3 .Click edit on ..."> 3 .Click edit on ...">
Lucene search

K
huntrHainguyen0207E2542CBE-41AB-4A90-B6A4-191884C1834D
HistorySep 01, 2023 - 6:44 p.m.

Store XSS in Users

2023-09-0118:44:52
hainguyen0207
www.huntr.dev
8
security flaw
xss vulnerability
user input
malicious code
injection
bug bounty

0.0004 Low

EPSS

Percentile

14.2%

Description

I noticed, your website is very secure.

But you overlooked a flaw XSS .

Proof of Concept

Detail:

1 .Login vs admin demo account and access admin page.

2 .Create a users ,insert payload in to Real name

 test"&gt;<img src>

3 .Click edit on the user just created, detect XSS

Video Poc

https://drive.google.com/file/d/1o90LvU60Rux8_ZpucmLRF0mAbBTpDzjs/view?usp=sharing

0.0004 Low

EPSS

Percentile

14.2%

Related for E2542CBE-41AB-4A90-B6A4-191884C1834D