Stored XSS - User Name (Profile)

TaintedPort

Back to App
Vuln ID TP-008 Title Stored XSS - User Name (Profile) Severity medium Type XSS HTTP Method PUT URL /auth/profile Parameter name Filename - Code Location frontend/components/Navbar.js line 26

Description

The user's name is stored without sanitization and rendered in the navigation bar using dangerouslySetInnerHTML. Executes on every page load.

Proof of Concept

name = <img src=x onerror=alert(document.cookie)>

Remediation

Use JSX text interpolation instead of dangerouslySetInnerHTML.