ExpressionEngine · Report #1096061
Stored XSS filter bypass on discussion forum. "URL" tag.
Validstatus
mediumseverity
26upvotes
28 May 2024disclosed
Summary
A vulnerability was identified and fixed that could have allowed attackers to bypass the XSS filter in the discussion forum, enabling arbitrary JavaScript execution in the victim's browser.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.