2 ms·
In Magento (but can be applied to any type of product really), I added XSS to all $_POST requests in code and managed to find an XSS. Even though it was self-XS
by dutchbrit 4y ago
In Magento (but can be applied to any type of product really), I added XSS to all $_POST requests in code and managed to find an XSS. Even though it was self-XSS and I didn’t receive a bug bounty, it was a really simple way of finding it. I’m sure there are browser extensions that do the same but still. Same could be applied with SQL injections.