HexBrain

U.S. Dept Of Defense · Report #1223577

XSS Reflected - ██████████

Validstatus
mediumseverity
11upvotes
19 Jan 2022disclosed

How it was found

Hi Team,

I found a XSS Reflected.

https://██████████/███onload=%22prompt(1)

Thanks DRauschkolb

Impact

XSS vulnerabilities can be used to trick a web user into executing a malicious script, potentially revealing a user's web session information or modify web content & even steal cookies.

System Host(s)

██████████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

https://████████/██████onload=%22prompt(1)

Suggested Mitigation/Remediation Actions

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original