Loading HuntDB...

Dom-Based XSS on parameter ?vsid=

Low
J
JetBlue
Submitted None

Team Summary

Official summary from JetBlue

Researcher found a DOM XSS vulnerability in one of the JetBlue applications using the vsid parameter. The researcher used the below payload to trigger XSS: #');alert(1);//

Reported by dracoludio

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Cross-site Scripting (XSS) - DOM