http://www.intersoftsolutions.com/Community/WebCombo/Regarding-XSS-issue-faced-in-the-web-combo/http://www.intersoftsolutions.comenCopyright 2002 - 2015 Intersoft Solutions Corp. All rights reserved.60http://www.intersoftsolutions.com/Community/WebCombo/Regarding-XSS-issue-faced-in-the-web-combo/Tue, 01 Aug 2023 08:30:25 GMTsphinxg@usa.netXSScross-site scriptingUnencoded characters<p class="MsoNormal" style="margin-bottom:10.0pt;line-height:115%;mso-pagination:none;mso-layout-grid-align:none;text-autospace:none"><b><span lang="EN"><br></span></b></p><p class="MsoNormal" style="margin-bottom:10.0pt;line-height:115%;mso-pagination:none;mso-layout-grid-align:none;text-autospace:none"><b><span lang="EN">Hi</span></b><span lang="EN">,<o:p></o:p></span></p><p class="MsoNormal" style="margin-bottom:10.0pt;line-height:115%;mso-pagination: none;mso-layout-grid-align:none;text-autospace:none"><span lang="EN">We are facing the below mentioned security issue in one of our client environments.<o:p></o:p></span></p><p class="MsoNormal" style="margin-bottom:10.0pt;line-height:115%;mso-pagination: none;mso-layout-grid-align:none;text-autospace:none"><span lang="EN">A significant portion of the XSS test payload appeared in the web page, but the page's DOM was not modified as expected for a successful exploit. This result was manually verified to determine its accuracy.<o:p></o:p></span></p><p class="MsoNormal" style="margin-bottom:10.0pt;line-height:115%;mso-pagination: none;mso-layout-grid-align:none;text-autospace:none"><span lang="EN">Kindly find the attached screenshots for reference(Request and Response).</span></p><p class="MsoNormal" style="margin-bottom:10.0pt;line-height:normal;mso-pagination: none;mso-layout-grid-align:none;text-autospace:none"><span lang="EN"><!--[if gte vml 1]><v:shape id="Picture_x0020_2" o:spid="_x0000_i1025" type="#_x0000_t75" style='width:6in; height:59.5pt;visibility:visible;mso-wrap-style:square'> <v:imagedata src="file:///C:/Users/VELUMA~1.MOO/AppData/Local/Temp/msohtmlclip1/01/clip_image003.png" o:title=""/> </v:shape><![endif]--><!--[if !vml]--><!--[endif]--></span><span lang="EN"><o:p></o:p></span></p><p><span style="font-family: Calibri, sans-serif; font-size: 11pt;">Kindly help us to resolve the same</span></p><p><span style="font-family: Calibri, sans-serif; font-size: 11pt;">Thanks in advance.</span></p>