Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2015/01/18 10:18 a.m.39 views

Vimeo: Application XSS filter function Bypass may allow Multiple stored XSS

Hi, As i analysed the application behavior and the security structure, i found out that the application is using "Greedy XSS Regex filter" against XSS and removes any the whole string from ''. So i tried some basic bypass which allowed me to insert tags and other characters into the string. Here ...

5.8AI score
SaveExploits0
Rows per page
Query Builder