HexBrain

U.S. Dept Of Defense · Report #1143783

xss reflected on https://███████- (███ parameters)

Validstatus
mediumseverity
1upvotes
29 Jul 2021disclosed

How it was found

Greetings, i've found an xss on█████████(████████ parameters)

link : █████████████████ Payload :

"/><script>alert(1);</script>

vulnerable parameters

█████████

████ ████

Impact

A reflected XSS vulnerability happens when the user input from a URL or POST data is reflected on the page without being stored, thus allowing the attacker to inject malicious content.

System Host(s)

███████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

link : ███████████

Suggested Mitigation/Remediation Actions

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original