slickMsg 0.7-alpha BBCode CSS Cross Site Scripting

Risk: Low
Local: No
Remote: Yes
CWE: CWE-79 advisory: BBCode CSS XSS in slickMsg Summary: Details: -----------Summary----------- eVuln ID: EV0162 Software: slickMsg Vendor: n/a Version: 0.7-alpha Critical Level: low Type: Cross Site Scripting Status: Unpatched. No reply from developer(s) PoC: Available Solution: Not available Discovered by: Aliaksandr Hartsuyeu ( ) --------Description-------- It is possible to inject XSS code (expression) into CSS style of size and color bbcodes. "size" and "color" values are not properly sanitized before being used in CSS code. Note: works in MS IE --------PoC/Exploit-------- CSS XSS in BBcodes examples XSS example 1: [size=expression(alert(123))]size[/size] XSS example 2: [color=expression(alert(456))]blue[/color] ---------Solution---------- Not available ----------Credit----------- Vulnerability discovered by Aliaksandr Hartsuyeu - recent bbcode xss advisories

Vote for this issue:


Thanks for you vote!


Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024,


Back to Top