Stored XSS at Module Name
Medium
Vulnerability Details
## Summary:
Hello, I found stored xss at module name with this payload ```"><div onmouseover="alert('XSS');">Hello :)```
## Steps To Reproduce:
1. Add new container, it doesn't matter which is it
2. Paste this payload in the module name```"><div onmouseover="alert('XSS');">Hello :)```
3. Update it then check the module name again in setting
4. Alert Popup
## Stored XSS
Stored cross-site scripting (also known as second-order or persistent XSS) arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way.
## Impact
Execute Js in victims browser
Actions
View on HackerOneReport Stats
- Report ID: 1126433
- State: Closed
- Substate: resolved
- Upvotes: 23