Forum GLPI-Project

Daviid

Member

Registered: 2018-12-20

Posts: 12

XSS on follow-up

Forgive me for not being more specific I'm not too into this kind of stuff and I was just testing my own installation (9.3.0) out of curiosity.

I found that this works and shows an alert.

<a onmouseover="alert('xss')">xxs</a> 
<IMG SRC=/ onerror="alert('xss')"></img>

There might be more on owasp's XSS Filter Evasion Cheat Sheet.

EJsNog

Member

Registered: 2019-01-04

Posts: 3

Re: XSS on follow-up

I apologise, but it not absolutely that is necessary for me. There are other variants?