Skip to content

Commit f3ec01d

Browse files
committed
Added S-51
1 parent a78f43f commit f3ec01d

3 files changed

Lines changed: 15 additions & 0 deletions

File tree

README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -69,6 +69,7 @@ S.No. | Topic
6969
**48** | [Vulnerable Code Snippet - 35](/resources/vulnerable-code-35.md)
7070
**49** | [Vulnerable Code Snippet - 36](/resources/vulnerable-code-36.md)
7171
**50** | [Vulnerable Code Snippet - 37](/resources/vulnerable-code-37.md)
72+
**51** | [Vulnerable Code Snippet - 38](/resources/vulnerable-code-38.md)
7273

7374
# SecurityExplained NewsLetter
7475

media/code-38.jpg

112 KB
Loading

resources/vulnerable-code-38.md

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
### SecurityExplained S-51: Vulnerable Code Snippet - 38
2+
3+
#### Vulnerable Code:
4+
5+
![Vulnerable Code](../media/code-38.jpg)
6+
7+
8+
#### Solution:
9+
10+
The code is vulnerable to DOM-based XSS and allows execution of XSS using "s" parameter using payloads like: x'onmouseover=alert(1)//
11+
12+
Twitter Thread: https://twitter.com/harshbothra_/status/1495224184611524608
13+
14+
##### Code Credits: @Brumens2

0 commit comments

Comments
 (0)