Stored XSS on Title of Page List in edit page list

Disclosed: 2015-07-08 18:32:13 By ishahriyar To concretecms
Unknown
Vulnerability Details
Xss payload saved permanently on Title of Page List in edit page list Poc : "><img src=x onerror=alert(1)>
Actions
View on HackerOne
Report Stats
  • Report ID: 50554
  • State: Closed
  • Substate: resolved
  • Upvotes: 1
Share this report