The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Cross site scripting (DOM-Based)

cyphlox | Last updated: Oct 07, 2022 06:41PM UTC

Burp has created a tentative DOM XSS issue with this description: The application may be vulnerable to DOM-based cross-site scripting. Data is read from window.location.hash and passed to $() And these are the statements: let currentURL = window.location.hash; let htmlAnchor = $(".customrte a" + currentURL + ""); I want to know how this is possibly exploitable. Thanks! Cyphlox

Michelle, PortSwigger Agent | Last updated: Oct 10, 2022 07:41AM UTC