Reflected XSS Vulnerability: Exploiting Action Form Fields for Malicious Script Execution

Reflected XSS Vulnerability: Exploiting Action Form Fields for Malicious Script Execution

CVE-2023-29457 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Reflected XSS attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script can be activated through Action form fields, which can be sent as request to a website with a vulnerability that enables execution of malicious scripts.

Learn more about our Web App Pen Testing.