What I Fixed A Cross-Site Scripting (XSS) vulnerability in cyberbro (122 ⭐), an...
What I Fixed
A Cross-Site Scripting (XSS) vulnerability in cyberbro (122 ⭐), an open-source OSINT platform. The search highlight feature used .innerHTML with unsanitized user input, allowing reflected XSS in search results.
Found by: GSC (Git Security Checker) — self-learning SAST scanner.
The Bug
File: src/views/SearchView.js
I built xss-labs, a free, open-source collection of 39 interactive XSS challenges. It runs entirely...
Mahdi Shamlou here. Mahdi, okay fine — you got me with NoSQL injection last time ( read that story...
GHSA-GX64-GJ6P-PC4C: Stored Cross-Site Scripting in JupyterLab Image Viewer Vulnerability...
GHSA-5CWR-5JXG-PCF6: Stored Cross-Site Scripting via Improper Cache Sanitization in Winter...
Well this is a typical XSS challenge, you find an injection point and pop and alert. Pretty...
This is a submission for DEV's Summer Bug Smash: Clear the Lineup powered by Sentry. ...
