---
id: 5116
title: "Fuzzing for XSS via nested parsers condition"
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/fuzzing-for-xss-via-nested-parsers-condition/"
published_at: "2021-12-29T13:58:06Z"
tags: ["fuzzing", "web-security", "xss", "research", "parsers"]
phying_url: "https://phying.com/item/5116"
lang: en
---

# Fuzzing for XSS via nested parsers condition

## Summary

A fuzzing technique for finding XSS in message-markup parsers (BBCode, Markdown, AsciiDoc, reStructuredText) by exploiting nested parser conditions, which uncovered vulnerabilities in popular products that had gone unnoticed. Presented at Power of Community 2021.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **Published:** 2021-12-29T13:58:06Z
- **Original:** https://swarm.ptsecurity.com/fuzzing-for-xss-via-nested-parsers-condition/
- **Phying News:** https://phying.com/item/5116