Skip to content

Instantly share code, notes, and snippets.

View KaiAF's full-sized avatar
🐱
A developer who slacks off way too much, but still tries her hardest!

iris KaiAF

🐱
A developer who slacks off way too much, but still tries her hardest!
View GitHub Profile
@Slowftw
Slowftw / livzmc-security-report-multiple-xss.md
Last active September 29, 2022 07:05
Security Report: Multiple XSS (Stored & Reflected) on https://livzmc.net

Multiple XSS (Stored & Reflected) on https://livzmc.net

Summary

1 stored and 5 reflected XSS vulnerabilities were found in several different routes and parameters due to incorrect or non-existent escaping/sanitization.

Stored XSS description from OWASP

occurs when a web application gathers input from a user which might be malicious, and then stores that input in a data store for later use. The input that is stored is not correctly filtered. As a consequence, the malicious data will appear to be part of the web site and run within the user’s browser under the privileges of the web application. Since this vulnerability typically involves at least two requests to the application, this may also called second-order XSS.

Reflected XSS description from