The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Cross-site scripting (DOM-based)

Veeru | Last updated: Oct 20, 2018 10:54AM UTC

Hi, When I am doing an active scan on a website, I got an issue name Cross-site scripting (DOM-based) with Severity: High Confidence: Tentative Issue detail The application may be vulnerable to DOM-based cross-site scripting. Data is read from location.pathname and passed to $() via the following statement: $('.topbar-navigation-link[href^="/' + location.pathname.split("/")[1] + '"]').addClass('active'); Now, I want to know that whether this issue is right? If it is, Can I exploit it? and how? I am a beginner at testing. So, please any tester can help me out? Thanks in advance.

PortSwigger Agent | Last updated: Oct 22, 2018 09:46AM UTC