Lucene search
Saharshtapi588FB241-BC8F-40FC-82A4-DF249956D69FHistoryJun 04, 2022 - 8:22 a.m.
Stored XSS in Project Name
2022-06-0408:22:16
saharshtapi
www.huntr.dev
15
0.001 Low
EPSS
Percentile
21.6%
Description
The application Titra is vulnerable to Stored XSS in Project name field.
Steps To Reproduce
- Click on Edit button
- Under the Project Name enter the paylaod
"><img src="#"> - Click on save.
- Now navigate to details the XSS will be triggered.
Image PoC
https://drive.google.com/file/d/1P44bIq0VgqMMUdb7VEKhF1Q_7PdY2k4Z/view?usp=sharing
https://drive.google.com/file/d/1sEJnrY8wxPY9gw1yPL1M4NH7Xe0qkgMT/view?usp=sharing
Related
prion
prion
Cross site scripting
2022-06-09 17:15:00
osv
osv
CVE-2022-2028
2022-06-09 17:15:09
cve
cve
CVE-2022-2028
2022-06-09 17:15:09
cvelist
cvelist
CVE-2022-2028 Cross-site Scripting (XSS) - Generic in kromitgmbh/titra
2022-06-08 08:35:18
nvd
nvd
CVE-2022-2028
2022-06-09 17:15:09