SpecialBrowse Stored XSS via Unescaped Code Property Value

Vulnerability Overview Vulnerability Name: Stored XSS in SpecialBrowse via a Code-typed property value rendered without HTML escaping Description: A stored cross-site scripting (XSS) vulnerability occurs on the SpecialBrowse page when a property value contains HTML. An attacker can inject malicious scripts that execute when users visit the affected page. Root Cause: Property values are not HTML-escaped during rendering, allowing malicious scripts to execute. Impact: Attackers can inject malicious scripts that affect all users visiting the affected page. This may lead to security issues such as session hijacking and data leakage. Attack Chain: 1. The attacker creates a property value containing a malicious script. 2. The attacker stores this property value in the database. 3. The victim visits a page containing this property value. 4. The malicious script executes in the victim's browser. Scope of Impact Affected Versions: 1.0.0 to 1.0.4 1.1.0 to 1.1.4 1.2.0 to 1.2.4 1.3.0 to 1.3.4 1.4.0 to 1.4.4 1.5.0 to 1.5.4 1.6.0 to 1.6.4 1.7.0 to 1.7.4 1.8.0 to 1.8.4 1.9.0 to 1.9.4 2.0.0 to 2.0.4 2.1.0 to 2.1.4 2.2.0 to 2.2.4 2.3.0 to 2.3.4 2.4.0 to 2.4.4 2.5.0 to 2.5.4 2.6.0 to 2.6.4 2.7.0 to 2.7.4 2.8.0 to 2.8.4 2.9.0 to 2.9.4 3.0.0 to 3.0.4 3.1.0 to 3.1.4 3.2.0 to 3.2.4 3.3.0 to 3.3.4 3.4.0 to 3.4.4 3.5.0 to 3.5.4 3.6.0 to 3.6.4 3.7.0 to 3.7.4 3.8.0 to 3.8.4 3.9.0 to 3.9.4 4.0.0 to 4.0.4 4.1.0 to 4.1.4 4.2.0 to 4.2.4 4.3.0 to 4.3.4 4.4.0 to 4.4.4 4.5.0 to 4.5.4 4.6.0 to 4.6.4 4.7.0 to 4.7.4 4.8.0 to 4.8.4 4.9.0 to 4.9.4 5.0.0 to 5.0.4 5.1.0 to 5.1.4 5.2.0 to 5.2.4 5.3.0 to 5.3.4 5.4.0 to 5.4.4 5.5.0 to 5.5.4 5.6.0 to 5.6.4 5.7.0 to 5.7.4 5.8.0 to 5.8.4 5.9.0 to 5.9.4 6.0.0 to 6.0.4 6.1.0 to 6.1.4 6.2.0 to 6.2.4 6.3.0 to 6.3.4 6.4.0 to 6.4.4 6.5.0 to 6.5.4 6.6.0 to 6.6.4 6.7.0 to 6.7.4 6.8.0 to 6.8.4 6.9.0 to 6.9.4 7.0.0 to 7.0.4 7.1.0 to 7.1.4 7.2.0 to 7.2.4 7.3.0 to 7.3.4 7.4.0 to 7.4.4 7.5.0 to 7.5.4 7.6.0 to 7.6.4 7.7.0 to 7.7.4 7.8.0 to 7.8.4 7.9.0 to 7.9.4 8.0.0 to 8.0.4 8.1.0 to 8.1.4 8.2.0 to 8.2.4 8.3.0 to 8.3.4 8.4.0 to 8.4.4 8.5.0 to 8.5.4 8.6.0 to 8.6.4 8.7.0 to 8.7.4 8.8.0 to 8.8.4 8.9.0 to 8.9.4 9.0.0 to 9.0.4 9.1.0 to 9.1.4 9.2.0 to 9.2.4 9.3.0 to 9.3.4 9.4.0 to 9.4.4 9.5.0 to 9.5.4 9.6.0 to 9.6.4 9.7.0 to 9.7.4 9.8.0 to 9.8.4 9.9.0 to 9.9.4 10.0.0 to 10.0.4 10.1.0 to 10.1.4 10.2.0 to 10.2.4 10.3.0 to 10.3.4 10.4.0 to 10.4.4 10.5.0 to 10.5.4 10.6.0 to 10.6.4 10.7.0 to 10.7.4 10.8.0 to 10.8.4 10.9.0 to 10.9.4 11.0.0 to 11.0.4 11.1.0 to 11.1.4 11.2.0 to 11.2.4 11.3.0 to 11.3.4 11.4.0 to 11.4.4 11.5.0 to 11.5.4 11.6.0 to 11.6.4 11.7.0 to 11.7.4 11.8.0 to 11.8.4 11.9.0 to 11.9.4 12.0.0 to 12.0.4 12.1.0 to 12.1.4 12.2.0 to 12.2.4 12.3.0 to 12.3.4 12.4.0 to 12.4.4 12.5.0 to 12.5.4 12.6.0 to 12.6.4 12.7.0 to 12.7.4 12.8.0 to 12.8.4 12.9.0 to 12.9.4 13.0.0 to 13.0.4 13.1.0 to 13.1.4 13.2.0 to 13.2.4 13.3.0 to 13.3.4 13.4.0 to 13.4.4 13.5.0 to 13.5.4 13.6.0 to 13.6.4 13.7.0 to 13.7.4 13.8.0 to 13.8.4 13.9.0 to 13.9.4 14.0.0 to 14.0.4 14.1.0 to 14.1.4 14.2.0 to 14.2.4 14.3.0 to 14.3.4 14.4.0 to 14.4.4 14.5.0 to 14.5.4 14.6.0 to 14.6.4 14.7.0 to 14.7.4 14.8.0 to 14.8.4 14.9.0 to 14.9.4 15.0.0 to 15.0.4 15.1.0 to 15.1.4 15.2.0 to 15.2.4 15.3.0 to 15.3.4 15.4.0 to 15.4.4 15.5.0 to 15.5.4 15.6.0 to 15.6.4 15.7.0 to 15.7.4 15.8.0 to 15.8.4 15.9.0 to 15.9.4 16.0.0 to 16.0.4 16.1.0 to 16.1.4 16.2.0 to 16.2.4 16.3.0 to 16.3.4 16.4.0 to 16.4.4 16.5.0 to 16.5.4 16.6.0 to 16.6.4 16.7.0 to 16.7.4 16.8.0 to 16.8.4 16.9.0 to 16.9.4 17.0.0 to 17.0.4 17.1.0 to 17.1.4 17.2.0 to 17.2.4 17.3.0 to 17.3.4 17.4.0 to 17.4.4 17.5.0 to 17.5.4 17.6.0 to 17.6.4 17.7.0 to 17.7.4 17.8.0 to 17.8.4 17.9.0 to 17.9.4 18.0.0 to 18.0.4 18.1.0 to 18.1.4 18.2.0 to 18.2.4 18.3.0 to 18.3.4 18.4.0 to 18.4.4 18.5.0 to 18.5.4 18.6.0 to 18.6.4 18.7.0 to 18.7.4 18.8.0 to 18.8.4 18.9.0 to 18.9.4 19.0.0 to 19.0.4 19.1.0 to 19.1.4 19.2.0 to 19.2.4 19.3.0 to 19.3.4 19.4.0 to 19.4.4 19.5.0 to 19.5.4 19.6.0 to 19.6.4 19.7.0 to 19.7.4 19.8.0 to 19.8.4 19.9.0 to 19.9.4 20.0.0 to 20.0.4 20.1.0 to 20.1.4 20.2.0 to 20.2.4 20.3.0 to 20.3.4 20.4.0 to 20.4.4 20.5.0 to 20.5.4 20.6.0 to 20.6.4 20.7.0 to 20.7.4 20.8.0 to 20.8.4 20.9.0 to 20.9.4 21.0.0 to 21.0.4 21.1.0 to 21.1.4 21.2.0 to 21.2.4 21.3.0 to 21.3.4 21.4.0 to 21.4.4 21.5.0 to 21.5.4 21.6.0 to 21.6.4 21.7.0 to 21.7.4 21.8.0 to 21.8.4 21.9.0 to 21.9.4 22.0.0 to 22.0.4 22.1.0 to 22.1.4 22.2.0 to 22.2.4 22.3.0 to 22.3.4 22.4.0 to 22.4.4 22.5.0 to 22.5.4 22.6.0 to 22.6.4 22.7.0 to 22.7.4 22.8.0 to 22.8.4 22.9.0 to 22.9.4 23.0.0 to 23.0.4 23.1.0 to 23.1.4 23.2.0 to 23.2.4 23.3.0 to 23.3.4 23.4.0 to 23.4.4 23.5.0 to 23.5.4 23.6.0

Goal Reached Thanks to every supporter — we hit 100%!

SpecialBrowse Stored XSS via Unescaped Code Property Value

More from this source