Client Side Template Injection to Stored XSS in Image Collection

Summary

Client-side template injection vulnerabilities arise when applications using a client-side template framework dynamically embed user input in web pages. When rendering a page, the framework scans it for template expressions and executes any that it encounters. An attacker can exploit this by supplying a malicious template expression that launches a cross-site scripting (XSS) attack. Attacker can steal victim session cookies and takeover their account.