ishangsf/rspec
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
rspec/rules/S5131/summary.adoc
Roberto Orlandi 83eefb94b5 Education s5131 one file per language (#1002)
2023-03-02 18:07:54 +01:00

1 line
308 B
Plaintext
Raw Blame History

This vulnerability makes it possible to temporarily execute JavaScript code in the context of the application, granting access to the session of the victim. This is possible because user-provided data, such as URL parameters, are copied into the HTML body of the HTTP response that is sent back to the user.
Reference in New Issue View Git Blame Copy Permalink