The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Having doubt

Arish | Last updated: Sep 05, 2021 04:18PM UTC

In many of the websites, if I enter invalid credentials and capture it with burpsuite the response shows the entire html source, in that if I add any script tag with alert it executed in some websites but not in all.Is this a xss vulnerability?if not why it is executed some of the websites?

Uthman, PortSwigger Agent | Last updated: Sep 06, 2021 09:09AM UTC