Stored XSS - Shipping Name (Checkout)

TaintedPort

Back to App
Vuln ID TP-009 Title Stored XSS - Shipping Name (Checkout) Severity medium Type XSS HTTP Method POST URL /orders Parameter shipping_address.name Filename - Code Location frontend/app/orders/[id]/page.js line 95

Description

The shipping name entered during checkout is stored and rendered on the order detail page using dangerouslySetInnerHTML.

Proof of Concept

name = <script>alert('XSS')</script>

Remediation

Use JSX text interpolation instead of dangerouslySetInnerHTML.