DemocracyLab / DemocracyLab/CivicTechExchange
Stored Cross-Site Scripting (XSS) in the Profile Page
- Dominant language
- JavaScript
- Stars
- 105
- Forks
- 71
- PR merge metrics
- No merged PRs in 30d
Description
There is a Cross-Site Scripting (XSS) vulnerability with medium-high severity in the Profile page.
**Reproduction Steps:**
1. Change bio of your profile to alert(1) and save.
2. Allow a few minutes for changes to reflect.
3. Refresh the login page and observe that the alert box pops up.
It is stored XSS with medium-severity because it is self-XSS. More testing would be needed to be done to determine full impact.
**Cause:**
unescapeHtml function at common/components/utils/utils.js. This function is used at common/components/componentsBySection/AboutUs/BioModal.jsx for displaying bio. It uses inner html and doesn't do output encoding.
Contributor guide
Assessment
This issue has not been assessed yet.