Check post xss on secondary page

RenwaX23 / XSSTRON

Electron JS Browser To Find XSS Vulnerabilities Automatically

GNU General Public License v3.0

683 stars 118 forks source link

Check post xss on secondary page #4

Closed shadowzoom closed 3 years ago

shadowzoom commented 3 years ago

In example i have POST request site.com/edit-account.php?username=1

And after that submit i need to check on another page site.com/myaccount.php is the xss is executed. , like --second-order in sqlmap

RenwaX23 commented 3 years ago

It supports second order XSS if you navigate to the vulnerable page you will get prompted, check the source for function pinghost() its where the injection occurs