Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
XSS vulnerability exists in admin page while adding a new administrator in the Login name field.
Steps to Reproduce:
Login as administrator
Navigate to the "Manage administrators" under config.
Click on "Add new admin"
Inject the payload in the Login name field
Payload: <script>alert(1)</script>
POC:
The text was updated successfully, but these errors were encountered:
Successfully merging a pull request may close this issue.
XSS vulnerability exists in admin page while adding a new administrator in the Login name field.
Steps to Reproduce:
Login as administrator
Navigate to the "Manage administrators" under config.
Click on "Add new admin"
Inject the payload in the Login name field
Payload: <script>alert(1)</script>
POC:

The text was updated successfully, but these errors were encountered: