BugBountyHunter

Hi There

I found a XSS on the about.html page via the redirect_url parameter . The parameter is missing sensitization

Payload

javascript:alert(document.domain)

Steps To Reproduce

Go to:

• https://9ec4e8d7f009-didsec.a.firstbloodhackers.com/about.html?redirect_url=javascript:alert(document.domain)

Extra

this will endpoint will also act as a open redirect by using the payload //evil.com

Impact

• Perform any action within the application that the user can perform.
• View any information that the user is able to view.
• Modify any information that the user is able to modify.
• Initiate interactions with other application users, including malicious attacks, that will appear to originate from the initial victim user..
• Steal user's cookie.

Supporting Material/References:

• https://www.owasp.org/index.php/Top_10_2013-A3-Cross-Site_Scripting_(XSS)