There is a Critical Cross site XSS Vulnerability in Interactive YouTube
API Demo Beta, Discovered by various sources. One of the White Hat
Hacker "
Vansh Sharma" Inform us about this XSS Vulnerability with proof of concept.
Proof Of Concept :
- Open http://gdata.youtube.com/
- Enter script <img src="<img src=search"/onerror=alert("xss")//"> in the keyword area.
- Press ADD
No comments:
Post a Comment