The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

DOM Based XSS

Arvind | Last updated: Feb 27, 2024 01:40PM UTC

I am doing a penetration Testing of an application. Burp shows it is vulnerable to DOM based XSS. Basically I went to source code page in a browser and on inspect element I have entered an XSS payload in “window.location.href” and the payload got executed on that page. But it is not persistent one, once I refresh the page the payload vanished. Is this attack is valid DOM based XSS ?

Hannah, PortSwigger Agent | Last updated: Feb 28, 2024 11:34AM UTC