Lab-Reflected-XSS-with-some-SVG-markup-allowed-PRACTITIONER-LAB-Not-solved

Lab: Reflected XSS with some SVG markup allowed 📚 Studijní...

GHSA-XC2R-JF2X-GJR8 external-svg-loader Cross-site Scripting vulnerability

Summary According to the docs, svg-loader will strip all JS code before injecting the SVG file for security reasons but the input sanitization logic is not sufficient and can be trivially bypassed. This allows an attacker to craft a malicious SVG which can result in XSS. Details When trying to...

PT-2023-27208

Name of the Vulnerable Software and Affected Versions svg-loader versions prior to 1.6.9 Description The svg-loader library has insufficient input sanitization logic, allowing an attacker to craft a malicious SVG that can result in Cross-site Scripting XSS. The library removes event attributes su...

PT-2022-11356

Name of the Vulnerable Software and Affected Versions vditor versions prior to 1.0.34 Description The issue is related to Cross-site Scripting XSS - Stored, where vditor does not filter user input in SVG events, leading to XSS. This can be exploited using malicious SVG code, such as an animate ta...