Skip to content

Instantly share code, notes, and snippets.

@MCOfficer
Last active May 3, 2021 11:37
Show Gist options
  • Save MCOfficer/214545deb68a05ee35827b28d846b189 to your computer and use it in GitHub Desktop.
Save MCOfficer/214545deb68a05ee35827b28d846b189 to your computer and use it in GitHub Desktop.
trying to break the ES website plugin table
[
{
"name": "Test Plugin",
"authors": "MCOfficer",
"homepage": "\"><script>alert('xss')</script><\"",
"license": "Public Domain",
"version": "0",
"shortDescription": "<a href='https://httbin.org'>link</a> \"><SCRIPT>alert('XSS')</SCRIPT><\"",
"description": "",
"url": "",
"iconUrl": "&#34;><script>alert('xss')</script><&#34;",
"autoupdate": {
"type": "",
"url": "",
"iconUrl": ""
}
}
]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment