FlowscreenComponents Basepack, Version 3.0.7 Advisory
bishopfox.com | vulnerability | #web-security | #xss | #vulnerability | #salesforce | #security-advisory | #flowscreencomponents
Summary
Advisory: a reflected XSS in Salesforce library FlowScreenComponents BasePack 3.0.7 lets attackers execute JavaScript in the Salesforce domain via crafted parameters, risking session takeover.
- Published
- Collected
--- id: 3983 title: "FlowscreenComponents Basepack, Version 3.0.7 Advisory" source_domain: bishopfox.com source_url: "https://bishopfox.com/blog/flowscreencomponents-advisory" published_at: "2022-12-15T00:00:00Z" tags: ["web-security", "xss", "vulnerability", "salesforce", "security-advisory", "flowscreencomponents"] phying_url: "https://phying.com/item/3983" lang: en --- # FlowscreenComponents Basepack, Version 3.0.7 Advisory ## Summary Advisory: a reflected XSS in Salesforce library FlowScreenComponents BasePack 3.0.7 lets attackers execute JavaScript in the Salesforce domain via crafted parameters, risking session takeover. ## Intelligence Metadata - **Sources:** bishopfox.com - **Published:** 2022-12-15T00:00:00Z - **Original:** https://bishopfox.com/blog/flowscreencomponents-advisory - **Phying News:** https://phying.com/item/3983