HexBrain

U.S. Dept Of Defense · Report #1252229

XSS on https://███████/██████████ parameter

Validstatus
mediumseverity
1upvotes
7 Apr 2022disclosed

How it was found

PoC

https://███████/███

Pameter 'xxslots' must be invalid Payload xss%22%20tabindex%3d1%20autofocus%20onfocus%3d%22alert() ███████

Impact

XSS on https://███████/

System Host(s)

██████████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

Go to XSS on https://██████/██████████

Suggested Mitigation/Remediation Actions

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original