Ads keep us online. Without them, we wouldn't exist. We don't have paywalls or sell mods - we never will. But every month we have large bills and running ads is our only way to cover them. Please consider unblocking us. Thank you from GameBanana <3

XSS Using Object Tag with [data] attribute

A Bug


XSS is possible using the object tag data attribute with the base64 encoded URL.

Code:
<object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==">

Request: Can I get the Inline Styles unlocked? I know this sounds unfair to some of you but It would be nice if some of the administrators could do that for me. At least I'm trying to protect this website in any way I can. Thanks!

Comments

Sign up to access this!

No comments yet

Embed

menu
分享横幅
图片 URL
HTML 嵌入代码
BB Code 嵌入代码
Markdown 嵌入代码

Reporter

theNurky avatar
theNurky Joined 3y ago
I am offline
1,078 points Ranked 24006th
18 medals 2 rare
  • Submitted 20 Maps Medal icon
  • Returned 1000 times Medal icon
  • Submitted 5 Maps Medal icon
  • Returned 100 times Medal icon
  • One month a member Medal icon
  • Submitted 1 Tool Medal icon
theNurky
Sign up to access this!
Sign up to access this!
Sign up to access this!

Details

Resolution
最新
Priority
Problem Source
https://gamebanana.com

Share

  • Share on Reddit
  • Share on Twitter
  • Share on Facebook
  • access_time 2mo

More from Submitter

menu