Mars: RXSS on stores on *█████████/visitorRegistration.pml via destination parameter
The vulnerability involved a reflected XSS in the destination parameter of the visitorRegistration.pml endpoint across all stores under ██████████. A working proof of concept was provided demonstrating JavaScript execution via URL parameter injection...