Closed bhaskar3112 closed 1 year ago
Description:
https://cms-demo.netlify.com/#/collections/posts
Payload =
@bhaskar3112 this is expected. XSS is not a concern in an authenticated environment like a CMS.
Exploit Title: Netlify CMS 2.10.192 - Stored Cross-Site Scripting (XSS)
Exploit Author: bhaskar
Vendor Homepage: https://decapcms.org/docs/intro/
Software Link: https://github.com/decaporg/decap-cms
Version: 2.10.192
Tested on: https://cms-demo.netlify.com
Description:
https://cms-demo.netlify.com/#/collections/posts
Payload =