stored cross site scripting

Research Posts (3)

• Apr 3, 2021

  Stored Cross Site Scripting in October CMS

  Reported a stored cross site scripting by uploading XML file in October CMS.
• May 18, 2021

  XSS in Unified Transform (A school management software)

  Reported a stored cross site scripting in xyz
• Jul 29, 2021

  CraftCMS Zero-day Chain: XSS to SSTI triggering RCE

  Reported CVE-2021-27902 (XSS) and CVE-2021-27903 (SSTI) that can be chained together to gain Remote Code Execution in CraftCMS.