Lucene search

K
huntrHainguyen0207E4B0E8F4-5E06-49D1-832F-5756573623AD
HistorySep 12, 2023 - 7:39 a.m.

Store DOM XSS in FAQ

2023-09-1207:39:57
hainguyen0207
www.huntr.dev
5
website security
flaw
xss
proof of concept
admin access
category
faq
published
sticky
homepage
stored xss
video poc
bug bounty

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.2%

Description I noticed, your website is very secure.

But you overlooked a flaw XSS

Proof of Concept

1 .Login vs admin demo account and access admin page.

2 .Create a category, Question with payload:

   haido<script>alert(document.domain)</script>

3 .Select FAQ status published and Sticky

4 .Back to the homepage, detect Store XSS.

Video Poc

https://drive.google.com/file/d/1NBwnD1GXASK-B67997tP69hvHMA0-eUw/view?usp=sharing

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.2%

Related for E4B0E8F4-5E06-49D1-832F-5756573623AD