V5 - Validation/Sanitization
XSS via Referer
POC
Send the JS payload in Referer header Referer: javascript:alert('XSS'); See it’s reflected in the page
Impact
Low
Likelihood
low
Cobalt Vulnerability Wiki
Ready to get started?
Join some of these great clients we’re proud to have helped