Skip to content

XSS vulnerability on login page ref Parameter #10

Open
Open
XSS vulnerability on login page ref Parameter#10
@hamedeasy

Description

@hamedeasy
hamedeasy
opened on Aug 27, 2022

please check this link:
https://demo.go-admin.com/admin/login?ref=javascript:alert();//

after successful login XSS will be fired

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions