Skip to main content

Day 10

You are moderator of a Wordpress site. It’s monday morning and you had already a cup of coffee. While checking comments on site posted in the previous weekend, you found a plaintext transformed code.

<img src=x onerror="alert(1)" />

What type of attack was tried to check?

  • Path traversal
  • Banner grabbing
  • Subdomain scanning
  • Cross-site scripting
  • SOAP api

Cross site scripting 


Cross-site scripting


Cross-site scripting  😎


Cross-site scripting


It sounds like CSS (Cross-site scripting) attack.


XSS was the correct answer: XSS attacks enable attackers to inject client-side scripts into web pages viewed by other users (stored xss) or by attacker itself (reflecterd XSS)


I just found a real life example on this community:

 


I already reported this user to @Madi.Cristil 


Comment