Lucene search

K
huntrMohamedabdelhady9332559D548-B847-40FB-94D6-18C1AD58B789
HistoryDec 19, 2022 - 9:43 p.m.

Stored XSS while creating a new post

2022-12-1921:43:13
mohamedabdelhady933
www.huntr.dev
15
stored xss
post creation
security vulnerability
proof of concept
bug bounty

EPSS

0.001

Percentile

21.8%

Description

After login create a new post and type the following text with XSS payload

XSS in create post [<img src>](http://test.cc)

then click post that will be executed.

Proof of Concept

XSS in create post [te<img src>te](http://google.com)

EPSS

0.001

Percentile

21.8%

Related for 2559D548-B847-40FB-94D6-18C1AD58B789