Details

      Description

      Steps to reproduce

      • Create a Custom Field for Users, in the Type drop down menu select Group of Text Values.
      • Add some XSS ("><script>alert('Custom Field Key');</script>) into the Default Value.
      • Save the Custom Field.
      • Go to My Account and notice the popup window.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              yang.gao Yang Gao (Inactive)
              Reporter:
              laszlo.csontos Laszlo Csontos (Inactive)
              Participants of an Issue:
              Recent user:
              Esther Sanz
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                8 years, 46 weeks, 2 days ago

                  Packages

                  Version Package
                  6.1.2 CE GA3
                  6.1.30 EE GA3
                  6.2.0 CE M4