CVE-2023-6889: stored XSS Bypass in the TAGS Section and other places in the application in phpmyfaq

Hello,

I was able to bypass the XSS Protection and get a stored XSS using the XSS Payload in the Video and Screenshots.

Thank you for your time and effort.

Best regards Ahmed Hassan

Impact

Hello,

I was able to bypass the XSS Protection and get a stored XSS using the XSS Payload in the Video and Screenshots.

Thank you for your time and effort.

Best regards Ahmed Hassan

References

• stored XSS Bypass in the TAGS Section - Screenshot 1
• stored XSS Bypass in the TAGS Section - Video PoC
• stored XSS Bypass in the TAGS Section - Screenshot 2
• stored XSS Bypass in the TAGS Section - Video PoC 2