V5 - Validation/Sanitization

Stored XSS

POC

Change input areas with the following JS code

<svg/onload=alert(1)>

Observe that it’s stored in the page and JS is executed each time page is renewed

Note: This is a broad concept, above payload is just an example

Impact

Medium-High

Likelihood

Medium-High