Severity: Moderate
CWE: CWE-80, CWE-85
A DOM-based XSS vulnerability allows execution of arbitrary JavaScript due to unsanitized user input.
- Session hijacking
- Credential theft
- Client-side compromise
1.0.1
2.0.1
Reporter: krraze
Coordinator: 0x5t4l1n
Coordinator: harriiinnii