There is a stored XSS in the article review area

[1f3lse]

Comment area does not do input filtering
Poc
</p><img%20src=1%20onerror=alert(1)><p>

[94fzb]

@3lse The img tag not allow in comment, And i cat reproduce

[1f3lse]

@94fzb Need to capture the package for reproduction

[1f3lse]

@94fzb Maybe you have no restrictions on the server or storage.

[94fzb]

@3lse Comment use jsoup clean text, so img tag will remove when add comment

[1f3lse]

@94fzb Here is a way of attack by middlemen, by modifying traffic packets to achieve the purpose of attack.

[1f3lse]

So you need to do a verification of the received data to avoid this problem.

[94fzb]

So you need to do a verification of the received data to avoid this problem.

Verification browser received data ?

[1f3lse]

@94fzb yes!

[94fzb]

@3lse I think https is better way, and now the program support https

[1f3lse]

@94fzb Maybe