Description

Stored HTML Injection: A Hidden Web Threat. Learn how attackers exploit input fields to inject malicious code into web applications, jeopardizing user data and site integrity. Discover crucial prevention measures to safeguard against this insidious vulnerability.

#Step to reproduce

  1. Login to froxlor as admin
  2. Under the resource go to Hosting plans  and Add new plan  
  3. In the plan name field  add the HTML payload and save it  
  4. once after saving the plan we can see that  the payload is working 

Proof of Concept

https://drive.google.com/file/d/1zAKGmVoxwmzXZbi6S4TZs9ZA3A7VhXxJ/view?usp=sharing