stored XSS Protection bypass by changing the User Profile Name

Hello,

I was able to bypass the XSS Vulnerability i reported before by using this Payload.

Lets try first a normal XSS Payload which will not work

for example -> <script>alert(‘1’)</script> -> NOT WOKRING :)

lets try the bypass payload

1’"><img/src/onerror=.1|alertAHMED-Vienna>

XSS Payload fired and its stored -> let me show you

stored XSS :)

-> it is a stored XSS.

Lets see.

Thank you for watching :)