Lucene search

K
huntrHuydoppaBD2FB1F1-CC8B-4EF7-8E2B-4CA686D8D614
HistoryMar 03, 2022 - 3:38 a.m.

Cross-site Scripting (XSS) - Reflected

2022-03-0303:38:42
huydoppa
www.huntr.dev
10

0.001 Low

EPSS

Percentile

30.2%

Description

Please enter a description of the vulnerability.

Proof of Concept

xss in function add domain
POST /add/web
v-custom-doc-domain=<script>alert(1)</script>
https://drive.google.com/file/d/1EeoOX7Pmn5ptuweine4Cgcy1fyd6qEzJ/view?usp=sharing

Impact

0.001 Low

EPSS

Percentile

30.2%

Related for BD2FB1F1-CC8B-4EF7-8E2B-4CA686D8D614