Lucene search

K
huntrJosefjkuBCE84C02-ABB2-474F-A67B-1468C9DCABB8
HistoryFeb 14, 2023 - 2:28 p.m.

stored XSS in the Category Field Name

2023-02-1414:28:31
josefjku
www.huntr.dev
2
stored xss
category field
bypass possibility
mitigations

0.001 Low

EPSS

Percentile

23.5%

Hello,

After all XSS Mitigations, I detected a XSS Bypass Possibility in the Naming of the category.

Let’s see :)


A stored XSS through this Payload

Thank you for watching :)

0.001 Low

EPSS

Percentile

23.5%

Related for BCE84C02-ABB2-474F-A67B-1468C9DCABB8