XSS vulnerabilities in `letter` parameter

FLEXIcontent / flexicontent-cck

Advanced content management for Joomla

http://www.flexicontent.org

82 stars 53 forks source link

XSS vulnerabilities in `letter` parameter #1013

Closed akunzai closed 3 years ago

akunzai commented 3 years ago

It is possible to inject javascript code in the letter parameter.

xss-letter-01

xss-letter-02

Steps to reproduce

pass query string ?letter=%F6%22%20accesskey=x%20onclick=%22alert(%27XSS%27) to the listing filter form URL with Firefox browser, and press the hotkey (Ctrl+Option+x on macOS or Ctrl+Alt+x on Windows).