WS-2023-0184

Brave iOS has three weaknesses. By combining them, Universal XSS can be achieved. First issue - Exposure of UserScriptManager.securityToken Playlist.js embeds the exact value of the $ into HTMLVideoElement.prototype.setAttribute. By reading the value, an attacker can retrieve the hidden security...

Brave Software: Universal XSS with Playlist feature

A Universal XSS vulnerability was discovered in Brave iOS versions 1.32.3 and higher. The vulnerability was caused by three weaknesses, including the exposure of UserScriptManager.securityToken and UserScriptManager.messageHandlerToken, as well as a UXSS vulnerability in PlaylistHelper through...

CVE-2017-6814: Improper Neutralization of Input During Web Page Generation

In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...