The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Wrong URL path is used in Reflected XSS vulnerability description

Ramesh | Last updated: Apr 01, 2021 03:47AM UTC

Initially below URL is used as vulnerable application URL path. https://insecure-website.com/search?term=gift And to show how is it vulnerable , the URL path got changed as below. https://insecure-website.com/status?message=<script>/*+Bad+stuff+here...+*/</script> It should be like : https://insecure-website.com/search?term=<script>/*+Bad+stuff+here...+*/</script>

Ben, PortSwigger Agent | Last updated: Apr 01, 2021 08:01AM UTC