Veris · Report #119453
www.veris.in DOM based XSS
Validstatus
3upvotes
22 Apr 2016disclosed
How it was found
Hi, An attacked can execute arbitrary js at your main page https://www.veris.in/?#<img src=x onerror=alert(1)>
vulnerable js source: https://www.veris.in/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate.min.js?ver=7e111f63322706ef9e00ec1e58f2edf4