search

zurmo / Zurmo

GNU Affero General Public License v3.0
101 stars 41 forks source link

XSS in checklist field #4

Open naxonez opened 8 years ago

naxonez commented 8 years ago

[*] Page affected

index.php/tasks/default/list#

[*] Fields affected

CheckList

PoC: You only need to create a list with a "check list" like ">< img src='' onerror=alert(23) ;>

Regards