Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Found a storage xss #259

Open
honnycy opened this issue Sep 4, 2018 · 4 comments
Open

Found a storage xss #259

honnycy opened this issue Sep 4, 2018 · 4 comments

Comments

@honnycy
Copy link

honnycy commented Sep 4, 2018

At https://lavalite.org/client/job/job/Zy8PWBekrJ/edit page
Job title fill in "><script>alert(1)</script>
2
saved
you can see it
at https://lavalite.org/client/job/job page
3

@honnycy honnycy changed the title find Found a storage xss Sep 4, 2018
@huntr-helper
Copy link

Bug Bounty

We have opened up a bounty for this issue on our bug bounty platform. Want to solve this vulnerability and get rewarded 💰? Go to https://huntr.dev/

We will submit a pull request directly to your repository with the fix as soon as possible. Want to learn more? Go to https://github.com/418sec/huntr 📚

Automatically generated by @huntr-helper...

@alromh87
Copy link

Can someone confirm this issue is still valid, and if so which version of the code your using

@B3EF
Copy link

B3EF commented Sep 22, 2020

you are right @alromh87 its not a valid code, as i was testing lavalite in the last week i didn't saw a client interface like this.

@honnycy
Copy link
Author

honnycy commented Nov 2, 2020

@alromh87 i test it in LavaLite - 5.5

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants