CVE-2020-11023 PoC — jQuery 跨站脚本漏洞

Source

Associated Vulnerability

Description

CVE-2020-11023  PoC for bug bounty.

Readme

# CVE-2020-11023 POC Dom XSS
This proof of concept, demostraste an security flaw of dom-bases XSS manipulating and using JQuery DOM Methods. eg:(.append, .text,.html)


Payload i used:
alert("Text: " + $("#test").text());


To test the vulnerability do the following:

1. Open and web console, on your browser and in the scope site.

2. Go to the console window and put the following payload:

3. Payload: 
alert("Text: " + $("#test").text());

File Snapshot

 [4.0K]  /data/pocs/815702c7c2ab097c63fca5328ff0fe1ac7d44f23
└── [ 445]  README.md

0 directories, 1 file

Remarks