Stored XSS with Filter Bypass – blogenginev3.3.8 –

– [[{“value”:”

Posted by Andrey Stoykov on Dec 18

# Exploit Title: Stored XSS with Filter Bypass – blogenginev3.3.8
# Date: 12/2024
# Exploit Author: Andrey Stoykov
# Version: 3.3.8
# Tested on: Ubuntu 22.04
# Blog:
https://msecureltd.blogspot.com/2024/12/friday-fun-pentest-series-16-stored-xss.html

Stored XSS Filter Bypass #1:

Steps to Reproduce:

1. Login as admin and go to “Content” > “Posts”
2. On the right side of the page choose “Categories”
3. In…
“}]] – Read More  – Full Disclosure