LocalTapiola: Blind Stored XSS Against Lahitapiola Employees - Session and Information leakage

Issue The reporter was able to perform a Blind Pervasive XSS against some of the public forms on LocalTapiolas website. The persistent or stored XSS vulnerability is a more devastating variant of a cross-site scripting flaw: it occurs when the data provided by the attacker is saved by the server,...