The code is vulnerable to DOM-based XSS and allows execution of XSS using "s" parameter using payloads like: x'onmouseover=alert(1)//
Twitter Thread: https://twitter.com/harshbothra_/status/1495224184611524608
The code is vulnerable to DOM-based XSS and allows execution of XSS using "s" parameter using payloads like: x'onmouseover=alert(1)//
Twitter Thread: https://twitter.com/harshbothra_/status/1495224184611524608