Stored XSS at Module Name

Disclosed: 2021-04-12 14:06:47 By 20kilograma To stripo
Medium
Vulnerability Details
## Summary: Hello, I found stored xss at module name with this payload ```"><div onmouseover="alert('XSS');">Hello :)``` ## Steps To Reproduce: 1. Add new container, it doesn't matter which is it 2. Paste this payload in the module name```"><div onmouseover="alert('XSS');">Hello :)``` 3. Update it then check the module name again in setting 4. Alert Popup ## Stored XSS Stored cross-site scripting (also known as second-order or persistent XSS) arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way. ## Impact Execute Js in victims browser
Actions
View on HackerOne
Report Stats
  • Report ID: 1126433
  • State: Closed
  • Substate: resolved
  • Upvotes: 23
Share this report