-
Notifications
You must be signed in to change notification settings - Fork 966
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Found a storage xss #259
Comments
Bug BountyWe have opened up a bounty for this issue on our bug bounty platform. Want to solve this vulnerability and get rewarded 💰? Go to https://huntr.dev/ We will submit a pull request directly to your repository with the fix as soon as possible. Want to learn more? Go to https://github.com/418sec/huntr 📚 Automatically generated by @huntr-helper... |
Can someone confirm this issue is still valid, and if so which version of the code your using |
you are right @alromh87 its not a valid code, as i was testing lavalite in the last week i didn't saw a client interface like this. |
@alromh87 i test it in LavaLite - 5.5 |
At https://lavalite.org/client/job/job/Zy8PWBekrJ/edit page
Job title fill in "><script>alert(1)</script>
saved
you can see it
at https://lavalite.org/client/job/job page
The text was updated successfully, but these errors were encountered: