Wanda film under Wanda Group has xss Vulnerability

Wanda film under Wanda Group has xss Vulnerability

Incomplete Filtering

 

Http://www.wandafilm.com/wanda/news.do? M = getNewByNewId & newsid= 20150126093724078641

The text is indeed filtered.

However

You can bypass it after adding % 20.

A vulnerability is a storage-based xss. It is loaded when evaluated into a website and can steal a large number of accounts.
 

This is a test. Sorry, hurry up and fix it. It's okay to have fewer people at night. It's not good to have more people.
 

I caught my own machine because no one was at night.


 

I tried to bypass other pages. It seems that the filtering needs to be enhanced.

Solution:

Enhanced Filtering