Skip to content

Code Injection vulnerability #8

@benja2998

Description

@benja2998

The user input is not sanitized, which leads to a code injection vulnerability.

How to recreate

Input this into the input box:

</b> <a href="#" onclick="alert('Hello, World!'); return false;">Click me</a>

Then, you will see the hyperlink appears:

Image

You can then click the hyperlink, which will run the code:

Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions