The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Dom Based XSS

luser | Last updated: Jun 10, 2019 07:04AM UTC

I got a notification from burp scanner as The application may be vulnerable to DOM-based cross-site scripting. Data is read from document.URL and passed to the 'prepend()' function of JQuery via the following statement: $("body:not(..." ) .prepend('<div clas...' + document.URL.substr(0 , document.URL.indexOf("?" ) ) + '> ...' ) but I don't understand how to exploit this ,help me out with this. Thank you.

Liam, PortSwigger Agent | Last updated: Jun 10, 2019 08:59AM UTC