Baidu knows the search result. xss can get user cookies.

Baidu does not know whether to filter and encode the question content in the search results. Users may be attacked by xss when viewing the results.

The search results that Baidu Knows should reference questions and answers from other users. When referencing a question from another user, the content of the question is not filtered and encoded. As a result, users who view the result may be attacked by xss.

Test method:

1. Construct the xss code in the question content.

2. Use another account to submit an answer, or use any answer to solve the problem.

3. Other users may be attacked by xss when they search for related keywords in Baidu knowledge.

 



4. Hackers can construct keywords that other users are interested in to expand the attack scope. When other users access Baidu, they may be attacked by xss.