Lucene search

K
huntrNyeooo5C147FF8-3CC4-4F21-9F1C-13FD50957DAD
HistorySep 15, 2023 - 5:31 p.m.

STORED XSS in Journal-> Sections

2023-09-1517:31:02
nyeooo
www.huntr.dev
3
stored xss
journal sections
target servers
persistent xss
type-ii xss
database
proof of concept
bug bounty

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

Description

Stored attacks are those where the injected script is permanently stored on the target servers, such as in a database, in a message forum, visitor log, comment field, etc. The victim then retrieves the malicious script from the server when it requests the stored information. Stored XSS is also sometimes referred to as Persistent or Type-II XSS.

Proof of Concept

https://drive.google.com/file/d/1ZrzJwy1kKdGPPmkIbU-GOB5Ok_G3Yywf/view?usp=sharing

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

Related for 5C147FF8-3CC4-4F21-9F1C-13FD50957DAD