Cross-site Scripting (XSS) - Reflected
该报告还没有中文解读。
原文摘录
摘自原文(2373 字符中的一小部分)
Hello, I found a XSS vulnerability in https://www.drugs.com/imprints.php?imprint=&color=&shape=0 The vulnerability is in the parameter *imprint*. The vulnerability only exists if there is at least one result in the search. However, if you put a text long enough, you will always have search results.
默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Drugs.com 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @mersenne · 版权归作者与 Drugs.com 所有