Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

XSS In Exponent 2.3.1 Manage Page

#1237

Cross Site Scripting In 2.3.1

URL - http://127.0.0.1/exponent/navigation/add_section/parent/0%22%3E%3Cs...

%281%29%3C/script%3E

Payload - ">

Severity - High

Exploitation- Remotely

POC Is attached with this ticket

Reported by Narendra Bhati · November 16th, 2014 @ 11:45 AM

State: new
Milestone: User issues
Assigned to: expNinja expNinja

Activity

  1. Narendra Bhati
    Narendra Bhati

    forget to attached text file

    kindly look into the attachment for text poc

    November 16th, 2014 @ 11:46 AM

  2. Narendra Bhati
    Narendra Bhati
    • Tag set to security

    November 16th, 2014 @ 12:02 PM

  3. Narendra Bhati
    Narendra Bhati

    Any Update ?

    November 17th, 2014 @ 06:10 AM

  4. Narendra Bhati
    Narendra Bhati
    • Assigned user set to expNinja

    So what your are going to do next ? about this issue

    December 20th, 2014 @ 02:03 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.