Hello Everyone, I hope everyone is doing great. In this write-up I am going to explain how did I found a Stored XSS in the widget builder feature of a website that made me 50$ Bounty. Its a private website so lets say the website is www.redacted.com
First thing first, I was just simply browsing the website, trying all the features the website provides, but I was of no luck, then suddenly I thought to check the widget builder function of the website.
- Go to settings
- Go to widget sections.
- Click on “Create New”
- Click on “Launcher Type”
- And in Text field Add your payload, and save it and the XSS will be executed.
It was a simple vulnerability, though it took almost 2-3 months for the company to reply, yet its fixed now.
Thanks For Reading. Will post more of my write-ups.