Baidu record store-type XSS (no exception for anyone who hits it)

Baidu record store-type XSS (no exception for anyone who hits it)

This storage-type XSS appears on the bar service blocking reason (so the premise is that you must have the bar master or have the seal permission)

Below I will demonstrate it with my own post and Baidu account



First, log on to our account (master or master)



Let's just enter a post (Here we write our own post)


 

After seeing a block, click and write our test code on the block reason.


 

"/> <Script> alert (/wooyun test/) </script>

 

 

 

At this time, a notification will be displayed in my notification. After we click it, our test statement will pop up at the click of the main notification.


 

 

The cookie that XSS calls.