Loading HuntDB...

Post Based Reflected XSS on https://apps.topcoder.com/wiki/plugins/socialbookmarking/updatebookmark.action

Medium
L
Lab45
Submitted None
Reported by meryem0x

Vulnerability Details

Technical details and impact analysis

Cross-site Scripting (XSS) - Reflected
## Summary: Hi :) A post based reflected XSS occurs when creating bookmarks. ## Steps To Reproduce: `Title` and `Labels` parameters are vulnerable to XSS on https://apps.topcoder.com/wiki/plugins/socialbookmarking/updatebookmark.action. This form uses POST request so i added HTML file below. When someone opens this html file, or we can add it into our website, XSS will execute. {F816815} {F816816} ## Impact XSS can use to steal cookies or to run arbitrary code on victim's browser.

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Cross-site Scripting (XSS) - Reflected