bug(scope): XSS with Certain Vulnerability in Nuclei

[estebanramos]

Current Behavior

Is there an existing issue for this?

• [X] I have searched the existing issues

Current Behavior

The XSS Payload attached triggers an Stored XSS with the vulnerability Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting

{\"Test<img src=x onerror=alert(document.domain)>\":1}

Expected Behavior

No XSS payloads inside a Vulnerability Description should trigger the actual vulnerability

Steps To Reproduce

1. Scan a Keycloak Target with 10.00 - 18.00 Version
2. Go to Vulnerabilities
3. The XSS is Triggered if Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting is found within Nuclei

Environment

- reNgine: 2.0.6
- OS: Ubuntu 11,4.0
- Python: 3.11.8
- Docker Engine: 20.10.13
- Docker Compose: 1.29.2
- Browser: Brave 1.64.116

Anything else?

Acknowledgements

• [X] This issue is not a duplicate of an existing bug report.
• [X] I have chosen an appropriate title.
• [X] All requested information has been provided properly.

[psyray]

Thanks for your report, we will try to sanitize data before displaying it in the UI

[psyray]

Could you post the location of the payload, ie: a screen of the developer console showing payload Thx

[estebanramos]

Sure, here it is

[psyray]

Fixed, could you test this PR to validate fix please