alt text Save the rule and see a xss-pop up.alt text">Cross-site Scripting (XSS) - Stored - vulnerability database | Vulners.comalt text Save the rule and see a xss-pop up.alt text">alt text Save the rule and see a xss-pop up.alt text">alt text Save the rule and see a xss-pop up.alt text">
Lucene search

K
huntrRibersecFAAE29BD-C43A-468D-8AF6-2B6AA4D40F09
HistoryFeb 18, 2022 - 1:27 p.m.

Cross-site Scripting (XSS) - Stored

2022-02-1813:27:14
ribersec
www.huntr.dev
6

0.001 Low

EPSS

Percentile

21.5%

Stored-xss is possible when adding a rule.

Create a new Alert Rule (like below) and adjust the query like below with the following payload

"&gt;<img src>
alt text

Save the rule and see a xss-pop up.
alt text

0.001 Low

EPSS

Percentile

21.5%

Related for FAAE29BD-C43A-468D-8AF6-2B6AA4D40F09