BugBountyHunter

Hi,

Please find a brief description of the vulnerability below,

Summary

On the login.php page on firstblood.com, there exists a reflected XSS vulnerability which can be used to execute arbitrary JavaScript payloads.

Steps to Reproduce:

1. Visit the vulnerable endpoint. Add the 'goto=' parameter to the URL along with payload and send the request to server.

2. Enter a valid username/password combo and click on 'secure login'. Observe that the server responds back with JavaScript payload getting executed in the next page.

Impact

Reflected XSS present in the GET parameter of login URL can allow an attacker to run malicious JavaScript on victim's browser which can lead to unintended re-directs, phishing attacks etc.