Lucene search

K
huntrNehalr77739C04778-6228-4F07-BDD4-AB17F246DBFF
HistoryDec 29, 2022 - 5:57 p.m.

Bypassing filters to trigger XSS while creating memos

2022-12-2917:57:00
nehalr777
www.huntr.dev
5
xss
filters
memos

0.001 Low

EPSS

Percentile

34.3%

Description

Stored cross-site scripting (also known as second-order or persistent XSS) arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way.

Payload: [ "><img src>]**

Proof of Concept

1) Go to https://demo.usememos.com/ and login into your account 
2) Add a memo with the payload mentioned above
3) You will see that an XSS popup will trigger 
4) Each time you visit this page you will see a pop-up

POC video: https://drive.google.com/file/d/1jpEEZlJsR78C8xWnJgFc6VTlXJKMewlI/view?usp=sharing

0.001 Low

EPSS

Percentile

34.3%

Related for 39C04778-6228-4F07-BDD4-AB17F246DBFF