3 ms·
There is an XSS vuln on the website. Try entering something like '<b>test</b>' or '<script>alert('test');</script>" into the text box.
by xurukefi 8y ago
There is an XSS vuln on the website. Try entering something like '<b>test</b>' or '<script>alert('test');</script>" into the text box.
- kogir 8y agoThis might matter if the site had any state or data to protect, but it doesn’t.
- est 8y agoThis might matter if the author is so careless, should I worry about other hidden vulnerabilities in this utility site overall.
- adrianN 8y agoThat just makes the service more flexible.
- uniformlyrandom 8y agoThat explains why it is blocked on my enterprise network.
- quickthrower2 8y agoThat's the same 'attack' you could make on https://jsfiddle.net https://jsfiddle.net What I am getting at is that you can't form a url that will do this, you need to interact with the page to trigger it.