writeups.xyz / Stored XSS in the administrator’s panel due to misuse of MarkupSafe

Submitter : c2a

Date: 6 October 2021

Bounty : undisclosed

Vulnerabilities :

• Stored XSS

Programs :

• Pass Culture

Authors :

• Aethlios (@AethliosIK)

Link :
https://www.aeth.cc/public/Article-Pass-Culture/stored-xss-article-en.html