s-cms Government station building system exists XSS

打开首页
![a](https://user-images.githubusercontent.com/48739932/66971619-852bb080-f0c4-11e9-97b0-47935f04a810.png)
点击政府建站系统得预览，进入预览网站
![b](https://user-images.githubusercontent.com/48739932/66971664-ab515080-f0c4-11e9-8f4c-5cb006d19255.png)
其中搜索功能处存在xss，过滤了on事件，但是使用payload："><svg/onload=alert(1)>成功弹窗
![d](https://user-images.githubusercontent.com/48739932/66971723-e5225700-f0c4-11e9-9098-c6b6f229ba56.png)
![e](https://user-images.githubusercontent.com/48739932/66971728-e81d4780-f0c4-11e9-8d6b-9234eb3df6ae.png)



Provide feedback

Saved searches

Use saved searches to filter your results more quickly

s-cms Government station building system exists XSS #1

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

s-cms Government station building system exists XSS #1

Description

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions