Skip to content

[BUG]: Possible CSS injection #1241

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
gluafamichl opened this issue Apr 15, 2025 · 0 comments
Open

[BUG]: Possible CSS injection #1241

gluafamichl opened this issue Apr 15, 2025 · 0 comments
Labels
bug Something isn't working

Comments

@gluafamichl
Copy link
Contributor

Version Information

0.14.4 Dev

Hashcat

No response

Description

Possible CSS injection in Drop Down lists.

  • Create a new hashlist
  • Set a valid HTML image tag as hashlist name
  • Save hashlist
    The name is correctly saved as string in the database, but when creating a new task, the image instead of the name is displayed in the hashlist drop-down list.
@gluafamichl gluafamichl added the bug Something isn't working label Apr 15, 2025
@gluafamichl gluafamichl moved this to Ready in 🐛 Bug Tracker Apr 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
Status: Ready
Development

No branches or pull requests

1 participant