search

tuna / fishroom

Message forwarding for multiple IM protocols
GNU General Public License v3.0
289 stars 58 forks source link

XSS on WebUI chat_log.html #12

Closed quininer closed 8 years ago

quininer commented 8 years ago

https://github.com/tuna/fishroom/blob/master/fishroom/web/chat_log.html#L108

Payload: http://aaa\"onmouseover=\"alert(1)

screenshot_20160318_201000