Loading HuntDB...

Stored XSS at Module Name

Medium
S
Stripo Inc
Submitted None
Reported by 20kilograma

Vulnerability Details

Technical details and impact analysis

Cross-site Scripting (XSS) - Stored
## Summary: Hello, I found stored xss at module name with this payload ```"><div onmouseover="alert('XSS');">Hello :)``` ## Steps To Reproduce: 1. Add new container, it doesn't matter which is it 2. Paste this payload in the module name```"><div onmouseover="alert('XSS');">Hello :)``` 3. Update it then check the module name again in setting 4. Alert Popup ## Stored XSS Stored cross-site scripting (also known as second-order or persistent XSS) arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way. ## Impact Execute Js in victims browser

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Cross-site Scripting (XSS) - Stored