Cross-Site Scripting #780

bright-security-dev · 2023-12-17T21:52:48Z

Cross-Site Scripting

Severity: High Discovered: 17 of December-2023, 09:52 PM UTC

CWE ID

CWE-79

CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Details

This attack inserted malicious input into a vulnerable element. This data element is shown below in the Additional Information section.
The attack inserted the value <script>alert("bright833242");</script> and used the action Clicking the element or moving the mouse over it to produce 'onmouseover' action..
This caused the target to execute an alert function with the value: bright833242 that verified whether the JavaScript injection was successful.

Possible exposure

Execute Unauthorized Code or Commands; Bypass Protection Mechanism; Read Application Data; Website Defacement

Remediation suggestions

Both reflected and stored XSS can be addressed by performing the appropriate validation and escaping on the server-side. DOM Based XSS can be addressed with a special subset of rules a more in-depth and detailed reading is suggested in the reference section

Request

GET http://brokencrystals.com/#faq-list-4 HTTP/1.1
Referer: http://brokencrystals.com/
accept-charset: 
accept: aaa 
Cookie: bc-calls-counter=1702840728532; connect.sid=z6-4hCQDphSNOL9X22qepI6EW4NhS5rp.BSX622Bk1Gi6eg2ig5Ogyo5lpUZGJOor9sLi8RLl7ls
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/106.0.5249.119 Safari/537.36
Accept-Encoding: identity
Content-Length: 0

Response

HTTP/1.1 200
Accept-Ranges: bytes
Connection: keep-alive
Content-Length: 7465
Content-Type: text/html
Date: Sun, 17 Dec 2023 21:51:47 GMT
ETag: "65253d32-1d29"
Last-Modified: Tue, 10 Oct 2023 12:01:54 GMT

<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="description" content="Broken Crystals"><meta name="author" content="farrza@neuralegion"><link rel="manifest" href="/api/config" charset="UTF-8"><link rel="apple-touch-icon" sizes="57x57" href="/favicons/apple-icon-57x57.png"><link rel="apple-touch-icon" sizes="60x60" href="/favicons/apple-icon-60x60.png"><link rel="apple-touch-icon" sizes="72x72" href="/favicons/apple-icon-72x72.png"><link rel="apple-touch-icon" sizes="76x76" href="/favicons/apple-icon-76x76.png"><link rel="apple-touch-icon" sizes="114x114" href="/favicons/apple-icon-114x114.png"><link rel="apple-touch-icon" sizes="120x120" href="/favicons/apple-icon-120x120.png"><link rel="apple-touch-icon" sizes="144x144" href="/favicons/apple-icon-144x144.png"><link rel="apple-touch-icon" sizes="152x152" href="/favicons/apple-icon-152x152.png"><link rel="apple-touch-icon" sizes="180x180" href="/favicons/apple-icon-180x180.png"><link rel="icon" type="image/png" sizes="192x192" href="/favicons/android-icon-192x192.png"><link rel="icon" type="image/png" sizes="32x32" href="/favicons/favicon-32x32.png"><link rel="icon" type="image/png" sizes="96x96" href="/favicons/favicon-96x96.png"><link rel="icon" type="image/png" sizes="16x16" href="/favicons/favicon-16x16.png"><meta name="msapplication-TileColor" content="#ffffff"><meta name="msapplication-TileImage" content="/favicons/ms-icon-144x144.png"><meta name="theme-color" content="#ffffff"><meta name="insight-app-sec-validation" content="38936a45-0c2c-4f3c-89c0-a26817f2a5a8"><script id="config" type="application/json" src="/api/config"></script><link rel="manifest" href="/manifest.json"><title>Broken Crystals</title><link href="https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i|Roboto:300,300i,400,400i,500,500i,600,600i,700,700i|Poppins:300,300i,400,400i,500,500i,600,600i,700,700i" rel="stylesheet"><link href="assets/vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet"><link href="assets/vendor/icofont/icofont.min.css" rel="stylesheet"><link href="assets/vendor/boxicons/css/boxicons.min.css" rel="stylesheet"><link href="assets/vendor/owl.carousel/assets/owl.carousel.min.css" rel="stylesheet"><link href="assets/vendor/venobox/venobox.css" rel="stylesheet"><link href="assets/vendor/aos/aos.css" rel="stylesheet"><link href="assets/css/style.css" rel="stylesheet"><link href="vendor/font-awesome-4.7/css/font-awesome.min.css" rel="stylesheet" media="all"><link href="vendor/font-awesome-5/css/fontawesome-all.min.css" rel="stylesheet" media="all"><link href="vendor/mdi-font/css/material-design-iconic-font.min.css" rel="stylesheet" media="all"><link href="vendor/animsition/animsition.min.css" rel="stylesheet" media="all"><link href="vendor/bootstrap-progressbar/bootstrap-progressbar-3.3.4.min.css" rel="stylesheet" media="all"><link href="vendor/wow/animate.css" rel="stylesheet" media="all"><link href="vendor/css-hamburgers/hamburgers.min.css" rel="stylesheet" media="all"><link href="vendor/slick/slick.css" rel="stylesheet" media="all"><link href="vendor/select2/select2.min.css" rel="stylesheet" media="all"><link href="vendor/perfect-scrollbar/perfect-scrollbar.css" rel="stylesheet" media="all"><link href="css/theme.css" rel="stylesheet" media="all"><link href="/static/css/2.50d7ef31.chunk.css" rel="stylesheet"><style type="text/css">/* Chart.js */
@-webkit-keyframes chartjs-render-animation{from{opacity:0.99}to{opacity:1}}@keyframes chartjs-render-animation{from{opacity:0.99}to{opacity:1}}.chartjs-render-monitor{-webkit-animation:chartjs-render-animation 0.001s;animation:chartjs-render-animation 0.001s;}</style></head><body data-aos-easing="ease" data-aos-duration="1000" data-aos-delay="0"><button type="button" class="mobile-nav-toggle d-lg-none"><i class="icofont-navigation-menu"></i></button><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"><header id="header" class="fixed-top "><div class="container-fluid"><div class="row justify-content-center"><div class="col-xl-9 d-flex align-items-center"><a class="logo mr-auto" href="/"><img src="assets/img/logo.png" alt="" class="img-fluid"> BROKEN CRYSTALS</a><nav class="nav-menu d-none d-lg-block"><ul><li class="undefined false"><a href="/?maptitle=map">Home</a></li><li class="undefined false"><a href="/marketplace?videosrc=https://www.youtube-nocookie.com/embed/MPYlxeG-8_w?controls=0">Marketplace</a></li><li class="undefined false"><a href="/userprofile">Edit user data</a></li><li class="drop-down false"><a href="">API Schema</a><ul><li><a href="/swagger-json" target="_blank">OpenAPI 3.0 JSON</a></li><li><a href="/swagger" target="_blank">API Reference</a></li><li><a href="/graphiql" target="_blank">GraphiQL</a></li></ul></li><li class="undefined false"><a href="https://github.com/NeuraLegion/brokencrystals#vulnerabilities-overview" target="_blank">Vulnerabilities</a></li></ul></nav><a href="/userlogin?logobgcolor=transparent" class="get-started-btn scrollto">Sign in</a><a href="/newuserlogin" class="get-started-btn scrollto">2-step Sign in</a></div></div></div></header><section id="hero" class="d-flex align-items-center"><div class="container-fluid aos-init aos-animate" data-aos="fade-up"><div class="row justify-content-center"><div class="col-xl-5 col-lg-6 pt-3 pt-lg-0 order-2 order-lg-1 d-flex flex-column justify-content-center"><h1>Your Vulnerable Crystal Marketplace</h1><h2>Find the most beautiful stones in one place!</h2><div><a href="#marketplacePreview" class="btn-get-started scrollto">Get Started</a></div></div><div class="col-xl-4 col-lg-6 order-1 order-lg-2 hero-img aos-init aos-animate" data-aos="zoom-in" data-aos-delay="150"><img src="assets/img/hero-img.png" class="img-fluid animated" alt=""></div></div></div></section><main id="main"><div id="marketplacePreview"><section><section id="marketplace" class="portfolio"><div class="container aos-init" data-aos="fade-up"><div class="section-title marketplaceTitle"><h2>Marketplace</h2></div><div class="row portfolio-container" style="position: relative; height: 408.219px;"><div class="col-lg-4 col-md-6 portfolio-item filter-Healing" style="position: absolute; left: 0px; top: 0px;"><div class="portfolio-wrap"><img src="/api/file?path=config/products/crystals/amber.jpg&type=image/jpg" class="img-fluid" alt=""><div class="portfolio-info"><h4>Amber</h4><p>fossilized tree resin</p></div><div class="portfolio-links"><a href="/api/file?path=config/products/crystals/amber.jpg&type=image/jpg" data-gall="portfolioGallery" class="venobox vbox-item" title="Amber"><i class="bx bx-plus"></i></a></div></div></div><div class="col-lg-4 col-md-6 portfolio-item filter-Gemstones" style="position: absolute; left: 440px; top: 0px;"><div class="portfolio-wrap"><img src="/api/file?path=config/products/crystals/ruby.jpg&type=image/jpg" class="img-fluid" alt=""><div class="portfolio-info"><h4>Ruby</h4><p>an intense heart crystal</p></div><div class="portfolio-links"><a href="/api/file?path=config/products/crystals/ruby.jpg&type=image/jpg" data-gall="portfolioGallery" class="venobox vbox-item" title="Ruby"><i class="bx bx-plus"></i></a></div></div></div><div class="col-lg-4 col-md-6 portfolio-item filter-Healing" style="position: absolute; left: 880px; top: 0px;"><div class="portfolio-wrap"><img src="/api/file?path=config/products/crystals/opal.jpg&type=image/jpg" class="img-fluid" alt=""><div class="portfolio-info"><h4>Opal</h4><p>the precious stone</p></div><div class="portfolio-links"><a href="/api/file?path=config/products/crystals/opal.jpg&type=image/jpg" data-gall="portfolioGallery" class="venobox vbox-item" title="Opal"><i class="bx bx-plus"></i></a></div></div></div></div></div><div class="section-readmore"><a href="/marketplace"><span>See all products</span></a></div></section><section id="testimonials" class="testimonials section-bg"><div class="container aos-init" data-aos="fade-up"><div class="section-title"><h2>Testimonials (5)</h2><p>Magnam dolores commodi suscipit. Necessitatibus eius consequatur ex aliquid fuga eum quidem. Sit sint consectetur velit. Quisquam quos quisquam cupiditate. Et nemo qui impedit suscipit alias ea. Quia fugiat sit in iste officiis commodi quidem hic quas.</p></div><div class="owl-carousel owl-carousel owl-loaded owl-drag"><div class="owl-stage-outer"><div class="owl-stage" style="transform: translate3d(0px, 0px, 0px); transition: all 0s ease 0s; width: 2150px;"><div class="owl-item active" style="width: 430px;"><div class="testimonial-item"><p><i class="bx bxs-quote-alt-left quote-icon-left"></i><span class="dangerous-html"><div>fsdwef</div></span><i class="bx bxs-quote-alt-right quote-icon-right"></i></p><img src="assets/img/testimonials/testimonials-1.jpg" class="testimonial-img" alt=""><h3 class="dangerous-html"><div>fsdfd</div></h3><h4 class="dangerous-html"><div>sdfsdf</div></h4></div></div><div class="owl-item active" style="width: 430px;"><div class="testimonial-item"><p><i class="bx bxs-quote-alt-left quote-icon-left"></i><span class="dangerous-html"><div>fsdwef</div></span><i class="bx bxs-quote-alt-right quote-icon-right"></i></p><img src="assets/img/testimonials/testimonials-1.jpg" class="testimonial-img" alt=""><h3 class="dangerous-html"><div>fsdfd</div></h3><h4 class="dangerous-html"><div>sdfsdf</div></h4></div></div><div class="owl-item active" style="width: 430px;"><div class="testimonial-item"><p><i class="bx bxs-quote-alt-left quote-icon-left"></i><span class="dangerous-html"><div>fsdwef</div></span><i class="bx bxs-quote-alt-right quote-icon-right"></i></p><img src="assets/img/testimonials/testimonials-1.jpg" class="testimonial-img" alt=""><h3 class="dangerous-html"><div>fsdfd</div></h3><h4 class="dangerous-html"><div>sdfsdf</div></h4></div></div><div class="owl-item" style="width: 430px;"><div class="testimonial-item"><p><i class="bx bxs-quote-alt-left quote-icon-left"></i><span class="dangerous-html"><div>fsdwef</div></span><i class="bx bxs-quote-alt-right quote-icon-right"></i></p><img src="assets/img/testimonials/testimonials-1.jpg" class="testimonial-img" alt=""><h3 class="dangerous-html"><div>fsdfd</div></h3><h4 class="dangerous-html"><div>sdfsdf</div></h4></div></div><div class="owl-item" style="width: 430px;"><div class="testimonial-item"><p><i class="bx bxs-quote-alt-left quote-icon-left"></i><span class="dangerous-html"><div>NvQUcb</div></span><i class="bx bxs-quote-alt-right quote-icon-right"></i></p><img src="assets/img/testimonials/testimonials-1.jpg" class="testimonial-img" alt=""><h3 class="dangerous-html"><div>NvQUcbNn</div></h3><h4 class="dangerous-html"><div>NvQUcb</div></h4></div></div></div></div><div class="owl-nav disabled"><button type="button" role="presentation" class="owl-prev"><span aria-label="Previous">‹</span></button><button type="button" role="presentation" class="owl-next"><span aria-label="Next">›</span></button></div><div class="owl-dots"><button role="button" class="owl-dot active"><span></span></button><button role="button" class="owl-dot"><span></span></button></div></div></div></section><section id="feedback" class="testimonials section-bg"><div class="container aos-init" data-aos="fade-up"><div class="section-title"><h2>feedback</h2><span>Please, upload a feedback: </span><label for="feedback-file-input" class="file-input-label"><img src="assets/img/upload-file.svg" alt="" class="upload-file-image"></label><input id="feedback-file-input" type="file" accept="file/*" style="display: none;"></div></div></section></section></div><section id="counts" class="counts"><div class="container"><div class="row counters"><div class="col-lg-3 col-6 text-center"><span data-toggle="counter-up">154</span><p>Crystals</p></div><div class="col-lg-3 col-6 text-center"><span data-toggle="counter-up">78</span><p>Gemstones</p></div><div class="col-lg-3 col-6 text-center"><span data-toggle="counter-up">23</span><p>Jewellery</p></div><div class="col-lg-3 col-6 text-center"><span data-toggle="counter-up">9</span><p>Massage</p></div></div></div></section><section id="faq" class="faq"><div class="container aos-init" data-aos="fade-up"><div class="section-title"><h2>Frequently Asked Questions</h2><p>Magnam dolores commodi suscipit. Necessitatibus eius consequatur ex aliquid fuga eum quidem. Sit sint consectetur velit. Quisquam quos quisquam cupiditate. Et nemo qui impedit suscipit alias ea. Quia fugiat sit in iste officiis commodi quidem hic quas.</p></div><div class="faq-list"><ul><li data-aos="fade-up" data-aos-delay="0" class="aos-init"><i class="bx bx-help-circle icon-help"></i> <a data-toggle="collapse" class="collapse" href="#faq-list-0">Non consectetur a erat nam at lectus urna duis?<i class="bx bx-chevron-down icon-show"></i><i class="bx bx-chevron-up icon-close"></i></a><div id="faq-list-0" class="collapse show" data-parent=".faq-list"><p>Feugiat pretium nibh ipsum consequat. Tempus iaculis urna id volutpat lacus laoreet non curabitur gravida. Venenatis lectus magna fringilla urna porttitor rhoncus dolor purus non.</p></div></li><li data-aos="fade-up" data-aos-delay="100" class="aos-init"><i class="bx bx-help-circle icon-help"></i> <a data-toggle="collapse" class="collapsed" href="#faq-list-1">Feugiat scelerisque varius morbi enim nunc?<i class="bx bx-chevron-down icon-show"></i><i class="bx bx-chevron-up icon-close"></i></a><div id="faq-list-1" class="collapse false" data-parent=".faq-list"><p>Dolor sit amet consectetur adipiscing elit pellentesque habitant morbi. Id interdum velit laoreet id donec ultrices. Fringilla phasellus faucibus scelerisque eleifend donec pretium. Est pellentesque elit ullamcorper dignissim. Mauris ultrices eros in cursus turpis massa tincidunt dui.</p></div></li><li data-aos="fade-up" data-aos-delay="200" class="aos-init"><i class="bx bx-help-circle icon-help"></i> <a data-toggle="collapse" class="collapsed" href="#faq-list-2">Dolor sit amet consectetur adipiscing elit?<i class="bx bx-chevron-down icon-show"></i><i class="bx bx-chevron-up icon-close"></i></a><div id="faq-list-2" class="collapse false" data-parent=".faq-list"><p>Eleifend mi in nulla posuere sollicitudin aliquam ultrices sagittis orci. Faucibus pulvinar elementum integer enim. Sem nulla pharetra diam sit amet nisl suscipit. Rutrum tellus pellentesque eu tincidunt. Lectus urna duis convallis convallis tellus. Urna molestie at elementum eu facilisis sed odio morbi quis.</p></div></li><li data-aos="fade-up" data-aos-delay="300" class="aos-init"><i class="bx bx-help-circle icon-help"></i> <a data-toggle="collapse" class="collapsed" href="#faq-list-3">Tempus quam pellentesque nec nam aliquam sem et tortor consequat?<i class="bx bx-chevron-down icon-show"></i><i class="bx bx-chevron-up icon-close"></i></a><div id="faq-list-3" class="collapse false" data-parent=".faq-list"><p>Molestie a iaculis at erat pellentesque adipiscing commodo. Dignissim suspendisse in est ante in. Nunc vel risus commodo viverra maecenas accumsan. Sit amet nisl suscipit adipiscing bibendum est. Purus gravida quis blandit turpis cursus in.</p></div></li><li data-aos="fade-up" data-aos-delay="400" class="aos-init"><i class="bx bx-help-circle icon-help"></i> <a data-toggle="collapse" class="collapsed" href="#faq-list-4">Tortor vitae purus faucibus ornare. Varius vel pharetra vel turpis nunc eget lorem dolor?<i class="bx bx-chevron-down icon-show"></i><i class="bx bx-chevron-up icon-close"></i></a><div id="faq-list-4" class="collapse false" data-parent=".faq-list"><p>Laoreet sit amet cursus sit amet dictum sit amet justo. Mauris vitae ultricies leo integer malesuada nunc vel. Tincidunt eget nullam non nisi est sit amet. Turpis nunc eget lorem dolor sed. Ut venenatis tellus in metus vulputate eu scelerisque.</p></div></li></ul></div></div></section><section id="contact" class="contact section-bg"><div class="container aos-init" data-aos="fade-up"><div class="section-title"><h2>Contact</h2><p>Magnam dolores commodi suscipit. Necessitatibus eius consequatur ex aliquid fuga eum quidem. Sit sint consectetur velit. Quisquam quos quisquam cupiditate. Et nemo qui impedit suscipit alias ea. Quia fugiat sit in iste officiis commodi quidem hic quas.</p></div><div class="row"><div class="col-lg-6"><div class="info-box mb-4"><i class="bx bx-map"></i><h3>Our Address</h3><p>A108 Adam Street, New York, NY 535022</p></div></div><div class="col-lg-3 col-md-6"><div class="info-box  mb-4"><i class="bx bx-envelope"></i><h3>Email Us</h3><p>contact@example.com</p></div></div><div class="col-lg-3 col-md-6"><div class="info-box  mb-4"><i class="bx bx-phone-call"></i><h3>Call Us</h3><p>+1 5589 55488 55</p></div></div></div><div class="row"><div class="col-lg-6 "><iframe class="mb-4 mb-lg-0" title="" src="https://www.google.com/maps/embed?pb=!1m14!1m8!1m3!1d12097.433213460943!2d-74.0062269!3d40.7101282!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x0%3A0xb89d1fe6bc499443!2sDowntown+Conference+Center!5e0!3m2!1smk!2sbg!4v1539943755621" frameborder="0" allowfullscreen="" style="border: 0px; width: 100%; height: 384px;"></iframe></div><div class="col-lg-6"><form role="form" class="php-email-form"><div class="form-row"><div class="col-md-6 form-group"><input type="text" name="name" class="form-control" id="name" placeholder="Your Name" data-rule="minlen:4" data-msg="Please enter at least 4 chars"><div class="validate"></div></div><div class="col-md-6 form-group"><input type="email" class="form-control" name="email" id="email" placeholder="Your Email" data-rule="email" data-msg="Please enter a valid email"><div class="validate"></div></div></div><div class="form-group"><input type="text" class="form-control" name="subject" id="subject" placeholder="Subject" data-rule="minlen:4" data-msg="Please enter at least 8 chars of subject"><div class="validate"></div></div><div class="form-group"><textarea class="form-control" name="message" rows="5" data-rule="required" data-msg="Please write something for us" placeholder="Message"></textarea><div class="validate"></div></div><div class="mb-3"><div class="loading">Loading</div><div class="error-message"></div><div class="sent-message">Your message has been sent. Thank you!</div></div><div class="text-center"><button type="submit">Send Message</button></div></form></div></div></div></section></main><footer id="footer"><div class="footer-top"><div class="container"><div class="row"><div class="col-lg-3 col-md-6 footer-contact"><a class="logo mr-auto" href="/"><img width="100" height="100" src="assets/img/logo.png" alt="" class="img-fluid"></a><h3>BROKEN CRYSTALS</h3><div>A108 Adam Street <br>New York, NY 535022<br>United States <br><br><strong>Phone:</strong> <span class="dangerous-html"><div>+1 5589 55488 55</div></span><br><strong>Email:</strong> info@example.com<br><a href="/api/secrets">🤫</a></div></div><div class="col-lg-2 col-md-6 footer-links"><h4>Useful Links</h4><ul><li><i class="bx bx-chevron-right"></i> <a href="/">Home</a></li><li><i class="bx bx-chevron-right"></i> <a href="/">About us</a></li><li><i class="bx bx-chevron-right"></i> <a href="/">Services</a></li><li><i class="bx bx-chevron-right"></i> <a href="/api/goto?url=http://google.com">Terms of service</a></li><li><i class="bx bx-chevron-right"></i> <a href="https://takemeover-bright.s3.amazonaws.com/privacy-policy.pdf">Privacy policy</a></li></ul></div><div class="col-lg-2 col-md-6 footer-links"><h4>Our Services</h4><ul><li><i class="bx bx-chevron-right"></i> <a href="/">Web Design</a></li><li><i class="bx bx-chevron-right"></i> <a href="/">Web Development</a></li><li><i class="bx bx-chevron-right"></i> <a href="/">Product Management</a></li><li><i class="bx bx-chevron-right"></i> <a href="/">Marketing</a></li><li><i class="bx bx-chevron-right"></i> <a href="/">Graphic Design</a></li></ul></div><div class="col-lg-4 col-md-6 footer-newsletter"><h4>Join Our Newsletter</h4><p>Tamen quem nulla quae legam multos aute sint culpa legam noster magna</p><form><input type="input" name="input" value=""><input type="submit" value="Subscribe"></form></div></div></div></div><div class="container"><div class="copyright-wrap d-md-flex py-4"><div class="mr-md-auto text-center text-md-left"><div class="copyright">© Copyright <strong><span>Broken Crystals</span></strong>. All Rights Reserved</div><span class="dangerous-html"><div>?name=<script>alert("bright833242");</script>&email=&subject=&message=</div></span></div><table><tbody><tr><td>Find us on: </td><td><div class="px-1 d-flex flex-row align-items-start social-links text-center text-md-right pt-3 pt-md-0"><a href="/"><i class="bx bxl-twitter"></i></a><a href="/"><i class="bx bxl-facebook"></i></a><a href="/"><i class="bx bxl-instagram"></i></a><a href="/"><i class="bx bxl-google-plus"></i></a><a href="/"><i class="bx bxl-linkedin"></i></a></div></td></tr><tr><td>Supporting: </td><td><div class="px-1 d-flex flex-row align-items-start social-links text-center text-md-right pt-3 pt-md-0"><a href="/api/file/google?path=google"><i class="bx bxl-google"></i></a><a href="/api/file/aws?path=aws"><i class="bx bxl-amazon"></i></a><a href="/api/file/azure?path=azure"><i class="bx bxl-microsoft"></i></a><a href="/api/file/digital_ocean?path=digital_ocean"><i class="bx bxl-digitalocean"></i></a></div></td></tr></tbody></table></div></div></footer><a href="/" class="back-to-top"><i class="icofont-simple-up"></i></a></div><script src="assets/vendor/jquery/jquery.min.js"></script><script src="assets/vendor/bootstrap/js/bootstrap.bundle.min.js"></script><script src="assets/vendor/jquery.easing/jquery.easing.min.js"></script><script src="assets/vendor/waypoints/jquery.waypoints.min.js"></script><script src="assets/vendor/counterup/counterup.min.js"></script><script src="assets/vendor/owl.carousel/owl.carousel.min.js"></script><script src="assets/vendor/isotope-layout/isotope.pkgd.min.js"></script><script src="assets/vendor/venobox/venobox.min.js"></script><script src="assets/vendor/aos/aos.js"></script><script src="assets/js/main.js"></script><script src="vendor/jquery-3.2.1.min.js"></script><script src="vendor/bootstrap-4.1/popper.min.js"></script><script src="vendor/bootstrap-4.1/bootstrap.min.js"></script><script src="vendor/slick/slick.min.js"></script><script src="vendor/wow/wow.min.js"></script><script src="vendor/animsition/animsition.min.js"></script><script src="vendor/bootstrap-progressbar/bootstrap-progressbar.min.js"></script><script src="vendor/counter-up/jquery.waypoints.min.js"></script><script src="vendor/counter-up/jquery.counterup.min.js"></script><script src="vendor/circle-progress/circle-progress.min.js"></script><script src="vendor/perfect-scrollbar/perfect-scrollbar.js"></script><script src="vendor/chartjs/Chart.bundle.min.js"></script><script src="vendor/select2/select2.min.js"></script><script src="js/main.js"></script><script>!function(e){function r(r){for(var n,a,i=r[0],c=r[1],l=r[2],s=0,p=[];s<i.length;s++)a=i[s],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(n in c)Object.prototype.hasOwnProperty.call(c,n)&&(e[n]=c[n]);for(f&&f(r);p.length;)p.shift()();return u.push.apply(u,l||[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,i=1;i<t.length;i++){var c=t[i];0!==o[c]&&(n=!1)}n&&(u.splice(r--,1),e=a(a.s=t[0]))}return e}var n={},o={1:0},u=[];function a(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,a),t.l=!0,t.exports}a.e=function(e){var r=[],t=o[e];if(0!==t)if(t)r.push(t[2]);else{var n=new Promise((function(r,n){t=o[e]=[r,n]}));r.push(t[2]=n);var u,i=document.createElement("script");i.charset="utf-8",i.timeout=120,a.nc&&i.setAttribute("nonce",a.nc),i.src=function(e){return a.p+"static/js/"+({}[e]||e)+"."+{3:"4c133f0f"}[e]+".chunk.js"}(e);var c=new Error;u=function(r){i.onerror=i.onload=null,clearTimeout(l);var t=o[e];if(0!==t){if(t){var n=r&&("load"===r.type?"missing":r.type),u=r&&r.target&&r.target.src;c.message="Loading chunk "+e+" failed.\n("+n+": "+u+")",c.name="ChunkLoadError",c.type=n,c.request=u,t[1](c)}o[e]=void 0}};var l=setTimeout((function(){u({type:"timeout",target:i})}),12e4);i.onerror=i.onload=u,document.head.appendChild(i)}return Promise.all(r)},a.m=e,a.c=n,a.d=function(e,r,t){a.o(e,r)||Object.defineProperty(e,r,{enumerable:!0,get:t})},a.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.t=function(e,r){if(1&r&&(e=a(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(a.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&r&&"string"!=typeof e)for(var n in e)a.d(t,n,function(r){return e[r]}.bind(null,n));return t},a.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(r,"a",r),r},a.o=function(e,r){return Object.prototype.hasOwnProperty.call(e,r)},a.p="/",a.oe=function(e){throw console.error(e),e};var i=this["webpackJsonpreact-broken-crystals"]=this["webpackJsonpreact-broken-crystals"]||[],c=i.push.bind(i);i.push=r,i=i.slice();for(var l=0;l<i.length;l++)r(i[l]);var f=c;t()}([])</script><script src="/static/js/2.e31297e0.chunk.js"></script><script src="/static/js/main.d0e39dc9.chunk.js"></script><nav class="mobile-nav d-lg-none"><ul><li class="undefined false"><a href="/?maptitle=map">Home</a></li><li class="undefined false"><a href="/marketplace?videosrc=https://www.youtube-nocookie.com/embed/MPYlxeG-8_w?controls=0">Marketplace</a></li><li class="undefined false"><a href="/userprofile">Edit user data</a></li><li class="drop-down false"><a href="">API Schema</a><ul><li><a href="/swagger-json" target="_blank">OpenAPI 3.0 JSON</a></li><li><a href="/swagger" target="_blank">API Reference</a></li><li><a href="/graphiql" target="_blank">GraphiQL</a></li></ul></li><li class="undefined false"><a href="https://github.com/NeuraLegion/brokencrystals#vulnerabilities-overview" target="_blank">Vulnerabilities</a></li></ul></nav><div class="mobile-nav-overly"></div></body></html>

Screenshots

External links

The text was updated successfully, but these errors were encountered:

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Cross-Site Scripting #780

Cross-Site Scripting #780

bright-security-dev bot commented Dec 17, 2023

Cross-Site Scripting #780

Cross-Site Scripting #780

Comments

bright-security-dev bot commented Dec 17, 2023

Cross-Site Scripting

CWE ID

CVSS

Details

Possible exposure

Remediation suggestions

Request

Response

Screenshots

External links