Description

There is a reflected XSS vulnerability on the site calibre-web.

Proof of Concept

1. go to the calibre e-book management
2. create a new book give the title name <script src=1 href=1 onerror="javascript:alert(300)"></script>
3. and give the title sort name <script src=1 href=1 onerror="javascript:alert(300)"></script>
4. save and go to the website
5.go to Author 
6.press one of the books
7. then right click and press inspect element
8. then press Author/strored

Video POC: https://drive.google.com/file/d/1umL5Vk5ezXxIA3nm43fPWl-FiD0Uy77z/view?usp=sharing

Impact

Reflected XSS allows attackers to misguide vistors of a website, steal cookies, and send arbitrary requests.