Not a bug IMG xss vulnerabilities?

topkurs2

Active member
Affected version
2.2.5
IMG xss vulnerabilities?
Code:
Hello [IMG alt="y"]http://site.com/x[/IMG] dolly
Code:
Hello [IMG]http://site.com/g[/IMG] `Friend` [IMG alt="m"]https://site.com/x[/IMG] dolly
 
These do not look like vulnerabilities, no.

I'm going to close this off for now but if you have a more concrete example of how this could be a vulnerability you should disclose those details safely by reporting the issue in private so we can investigate, if necessary, before information about any vulnerabilities becomes public.
 
Top Bottom