HomePhabricator

Transactions T103761 Change Details

Change Details

Old
New
Diff

1. Use Special:CreateTemplate to create a template 2. Add "<script>alert(1);</script>" to the Field name. 3. Go to Special:CreateForm, and add the template to the form 4. Script is executed It looks like Special:CreateTemplate can be called by anyone. The Special:CreateForm post to add the template doesn't check the csrf token, so it can be submitted for a user via csrf.

1. Use Special:CreateTemplate to create a template 2. Add "<script>alert(1);</script>" to the Field name. 3. Go to Special:CreateForm, and add the template to the form 4. Script is executed It looks like Special:CreateTemplate can be called by anyone. The Special:CreateForm post to add the template doesn't check the csrf token, so it can be submitted for a user via csrf.

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits