Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

FlowscreenComponents Basepack, Version 3.0.7 Advisory

bishopfox.com | vulnerability | #web-security | #xss | #vulnerability | #salesforce | #security-advisory | #flowscreencomponents

Summary

Advisory: a reflected XSS in Salesforce library FlowScreenComponents BasePack 3.0.7 lets attackers execute JavaScript in the Salesforce domain via crafted parameters, risking session takeover.
Published
Collected

original ↗

Related coverage

  1. An Interesting XSS-Bypassing WAF (labs.cognisys.group)
  2. The $12,000 Intersection between Clickjacking, XSS, and Denial of Service (samcurry.net)
  3. What's in a tag name? JavaScript, apparently (portswigger.net)
  4. WP Coder, Version 2.5.3 Advisory (bishopfox.com)
  5. Windows Task Scheduler Application, Version 19044.1706 Advisory (bishopfox.com)
  6. Log HTTP Requests, Version 1.3.1, Advisory (bishopfox.com)

back