Ashar Javed

http://xssplayground.net23.net/xss"onmouseover="alert(1);%20imagefile.svg %22%0Ajavascript:alert%28location%29

'">><marquee><img src=x onerror=confirm(1)></marquee>"></plaintext\></| \><plaintext/onmouseover=prompt(1)>"><script>alert(document.domain) </script>@gmail.com<isindex formaction=javascript:alert(/XSS/) type=submit>'-- >"></script><script>alert(1) </s '">><marquee><img src=x onerror=confirm(1)></marquee>"></plaintext\></| \><plaintext/onmouseover=prompt(1)>"><script>alert(document.domain) </script>@gmail.com<isindex formaction=javascript:alert(/XSS/) type=submit>'-- >"></script><script>alert(1) </s

Results 8 issues of


                                            Ashar Javed

XSS is Possible in URL function

Hi, XSS is possible in URL function that is available here: https://github.com/frozeman/feindura-flat-file-cms/blob/527920f665ba0ace68e5f22a1ddc7de078108504/library/classes/XssFilter.class.php#L410 The vector is: `javascript://www.xss.com?%0aalert%281%29` The regular expression you are using happily parse the above vector and attacker can...

Bug

Cross-Site Scripting in Mercury

4

comment

Hi, The editor is vulnerable to an XSS. The editor allows users to insert link and if instead of normal link, I input JavaScript URI `javascript:alert%28location%29` then it works. The...

Question Regarding Style Context

12

comment

Hey guys! I had a comment. I am looking at the test-bed http://hoola.cz/nette-xss-test/?do=form-submit that you had created during earlier issue for Nette testing in different context. My question is related...

XSS in bootstrap-wysihtml5

1

comment

Hi, The editor is vulnerable to an XSS. The editor allows users to insert link and if instead of normal link, I input JavaScript URI `javascript:alert%28location%29` then it works. The...

XSS in wysiwygetize

Hi, The editor is vulnerable to an XSS. The editor allows users to insert link and if instead of normal link, I input JavaScript URI `javascript:alert%28location%29` then it works. The...

sanitizeCSS is broken

7

comment

Hi, The sanitizeCSS function: https://github.com/templaza/plazart/blob/7c47a71881af009fdeadcb70221694acd1ada3cd/plg_system_plazart/includes/core/scriptsdown.php#L46 you are using is broken and easily by-passable and attacker can execute JavaScript code ... e.g., `color:red;width:expresssion(alert(1))` Would you please check? May I suggest a...

XSS in jQuery qeditor

Hi, The editor is vulnerable to an XSS. The editor allows users to insert link and if instead of normal link, I input JavaScript URI `javascript:alert%28location%29` then it works. The...

XSS in HTML-5-WYSIWYG-Editor

Hi, The editor is vulnerable to an XSS. The editor allows users to insert link and if instead of normal link, I input JavaScript URI `javascript:alert%28location%29` then it works. The...