Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Resolve reflected XSS issues #7378

Closed
asmecher opened this issue Oct 13, 2021 · 0 comments
Closed

Resolve reflected XSS issues #7378

asmecher opened this issue Oct 13, 2021 · 0 comments
Assignees
@asmecher
Milestone
3.3.0-9

Comments

@asmecher
Copy link
Member

See original report: https://huntr.dev/bounties/134160e4-92f7-4bc5-a1c6-d368f5c8280d/

There is a reflected XSS issue in the user creation interface where the user-supplied given name is bounced back to the browser. The user creation form is CSRF-protected and available to managers only, so the risk of abuse is low.

Resolve this issue and scan for others.
@asmecher asmecher added this to the 3.3.0-9 milestone Oct 13, 2021
@asmecher asmecher self-assigned this Oct 13, 2021
asmecher added a commit that referenced this issue Oct 13, 2021
@asmecher
#7378 Fix reflected XSS issues
33ebd1a
asmecher added a commit to pkp/omp that referenced this issue Oct 13, 2021
@asmecher
pkp/pkp-lib#7378 Fix reflected XSS issues
d1ced38
asmecher added a commit that referenced this issue Oct 13, 2021
@asmecher
#7378 Fix reflected XSS issues
b6b32e7
asmecher added a commit to pkp/omp that referenced this issue Oct 13, 2021
@asmecher
pkp/pkp-lib#7378 Fix reflected XSS issues
b71b2bf
asmecher added a commit to pkp/ojs that referenced this issue Oct 13, 2021
@asmecher
pkp/pkp-lib#7378 Fix reflected XSS issues
2507604
asmecher added a commit to pkp/ojs that referenced this issue Oct 13, 2021
@asmecher
pkp/pkp-lib#7378 Fix reflected XSS issues
0f01001
asmecher added a commit that referenced this issue Oct 13, 2021
@asmecher
#7378 Fix reflected XSS issues
79fe1c5
asmecher added a commit that referenced this issue Oct 13, 2021
@asmecher
#7378 Fix reflected XSS issues
0fcc0f7
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@asmecher asmecher

Labels
None yet
Projects
None yet
Milestone
3.3.0-9
Development

No branches or pull requests
1 participant
@asmecher