ebankIT 6 Cross Site Scripting - KizzMyAnthia.com
CVE-2023-30454[Description]An issue was discovered in ebankIT before version 7.Document Object Model based XSS exists within the/Security/Transactions/Transactions.aspxendpoint. Users can supply their own JavaScript within thectl100$ctl00MainContent$TransactionMainContent$accControl$hdnAccountsArrayPOST parameter that will be passed to an eval() function and executedupon pressing the continue button.------------------------------------------[Vulnerability Type]Cross Site Scripting (XSS)---------...
Maincontent Transactionmaincontent Jake Murphy Object Model Site Scripting Omnichannel Digital Banking Platform Document Object Model Based Cross Site Scripting
Source: kizzmyanthia.com