WS-2022-0288

In corebos, the value for the stuffid parameter is reflected in the web context without proper filtering in place resulting in possibility to execute malicious javascript code...

Reflected XSS via "stuffid" parameter

Description The value for the stuffid parameter is reflected in the web context without proper filtering in place resulting in possibility to execute malicious javascript code. Testing Environment 1. Windows OS 2. Firefox Browser Proof of Concept 1. Visit...