
CVE-2020-11023 PoC for bug bounty.
This proof of concept, demostraste an security flaw of dom-bases XSS manipulating and using JQuery DOM Methods. eg:(.append, .text,.html)
Payload i used: alert("Text: " + $("#test").text());
To test the vulnerability do the following:
Open and web console, on your browser and in the scope site.
Go to the console window and put the following payload:
Payload: alert("Text: " + $("#test").text());