The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

DOM-based XSS

Kingkong | Last updated: Dec 09, 2019 06:36AM UTC

Hi , I got the message like this : The application may be vulnerable to DOM-based cross-site scripting. Data is read from location.hash and passed to $() The response is : var id = location.hash.replace('#', ''); $elem = $( '[data-' + PLUGIN_NAME + '-id="' + id + '"]' ); How can I exploit this ? Thanks so much

Ben, PortSwigger Agent | Last updated: Dec 09, 2019 09:11AM UTC