Skip to content

Instantly share code, notes, and snippets.

@cd80
Last active February 14, 2024 07:16
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save cd80/87b41cf58ba04564d55f4a26152bf0a9 to your computer and use it in GitHub Desktop.
Save cd80/87b41cf58ba04564d55f4a26152bf0a9 to your computer and use it in GitHub Desktop.
- CVE ID
Not assigned yet
- Name of affected product and versions
https://github.com/jstrieb/urlpages
version <= commit 035b647
- Problem type
Attacker can execute arbitrary javascript code in victim's browser by sending specifically crafted url that exploits DOM based XSS in /index.html.
- Description
Cross Site Scripting (XSS) vulnerability in the component /index.html of github repository jstrieb/urlpages allows attackers to execute arbitrary javascript code via sending a crafted URL to a victim.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment