| Titolo | Vanderlande OpenAIR - Baggage 360 v7.0.0 Cross-Site Scripting (XSS) Stored |
|---|
| Descrizione | Vanderlande OpenAIR Baggage 360 v7.0.0 is vulnerable to stored XSS in the Messages feature. The endpoint POST /api-addons/v1/messages accepts HTML in the message field, stores it, and renders it unescaped. The payload executes when a user opens Bags → [select bag tag] → Interterm Bag Journey Details → Messages. A remote, authenticated low-privileged user can inject a script (e.g., <img src=x onerror=alert(document.cookie)>) into the message field and submit it. Anyone who later opens the affected bag tag will execute the JavaScript. The critical risk is that the Bags screen allows bulk selection. so using "Add Message" an attacker can attach the malicious payload to all selected bag tags in a single request. |
|---|
| Fonte | ⚠️ https://github.com/YasserREED/YasserREED-CVEs/edit/main/Vanderlande-OpenAIR-Baggage360/Stored%20Cross-Site%20Scripting%20(XSS).md |
|---|
| Utente | Anonymous User |
|---|
| Sottomissione | 24/09/2025 22:43 (11 mesi fa) |
|---|
| Moderazione | 05/10/2025 07:54 (10 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 327189 [Vanderlande Baggage 360 7.0.0 /api-addons/v1/messages Messaggio cross site scripting] |
|---|
| Punti | 20 |
|---|