Bo-Blog XSS cross-site Vulnerability

Long Ying

Today, over built a new blog to deploy vulnerabilities.

In the evening, I went to check out the bo-blog program. When I saw the above message board, I remembered the xss Cross-Site vulnerability.

Go to the message board page and select Open HTML.

Enter the test code below and try it. Some Code fails, so that the program is strictly filtered. Finally, the single quotes in the Code are removed and the result is successful.

Khan ~! Originally, only the single quotes are filtered and the following are used for vulnerability testing.