alwaysdata All Projects: Tasklist

	ID	Status	Summary	Opened by
	~~207~~	Closed	~~reflected XSS at admin.alwaysdata.com~~	wickedwolve	Task Description Hello there, i found an XSS vulnerability affecting "addresses" JSON parameter in a POST request to admin.alwaysdata.com/site/resolver. i have to apologies I didn't get around including a custom header before i found the bug, I'm hopeful this will be overlooked on my part my POC Is attached below pretty neet and straightforward and includes my IP as requested in POC guidelines. cheers. :)

~~207~~

Closed

~~reflected XSS at admin.alwaysdata.com~~

Task Description

Hello there,

i found an XSS vulnerability affecting "addresses" JSON parameter in a POST request to admin.alwaysdata.com/site/resolver.
i have to apologies I didn't get around including a custom header before i found the bug, I'm hopeful this will be overlooked on my part
my POC Is attached below pretty neet and straightforward and includes my IP as requested in POC guidelines. cheers.

Showing tasks 1 - 1 of 1 Page 1 of 1

Available keyboard shortcuts

Alt + ⇧ Shift + l Login Dialog / Logout
Alt + ⇧ Shift + a Add new task
Alt + ⇧ Shift + m My searches
Alt + ⇧ Shift + t focus taskid search

Tasklist

o open selected task
j move cursor down
k move cursor up

Task Details

n Next task
p Previous task
Alt + ⇧ Shift + e ↵ Enter Edit this task
Alt + ⇧ Shift + w watch task
Alt + ⇧ Shift + y Close Task

Task Editing

Alt + ⇧ Shift + s save task