writeups.xyz / Stored Iframe Injection & Permanent Open Redirection - Zero Day

Submitter : c2a

Date: 18 May 2023

Bounty : undisclosed

Vulnerabilities :

• HTML Injection
• Open Redirect

Programs :

• Discourse

Authors :

• Jerry Shah (@Jerry)

Link :
https://shahjerry33.medium.com/stored-iframe-injection-permanent-open-redirection-zero-day-ce7cd15903ac