Traffic service & campaign optimization ◆ ZexoCard: no-KYC virtual crypto cards ◆ Spoof Call and Spoof SMS set any caller ◆ Private Crypter - Unique Private Stubs ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › XSS vuln

New Reply 

XSS vuln
gr3yhat2
gr3yhat2 Offline
[n00b@HF:]
*
Registered
Posts:
3
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 20
Game XP:
0
Aug 28, 2026 03:05 AM
why is reflected xss a big vulnerability if its client side?
Money-
Money- Offline
I Only Deal With Contracts/On-Site
**********
H4CK3R$
Posts:
7,823
Threads:
562
Credibility:
94202
Popularity:
2,351
βytes:
β 430,845.93
Game XP:
631,041
Aug 28, 2026 03:27 AM
Its usually not until you are able to chain it with other exploits to escalate privileges.
[Image: j90qyxk.gif]
DramaKing
DramaKing Offline
[root@HF:]
**********
Legends
Posts:
13,421
Threads:
156
Credibility:
2800
Popularity:
943
βytes:
β 38,100
Game XP:
436,937
Aug 28, 2026 05:15 AM
(Aug 28, 2026 03:05 AM)gr3yhat2 Wrote:  why is reflected xss a big vulnerability if its client side?

It's a big vulnerability to the user without CSP and the 'Secure' and 'HTTP Only' cookie flags set. I'd give you an example of reflected XSS, but the Cloudflare WAF would have a fit.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by root._Feb 6, 2023 06:01 PM 1 153 Feb 6, 2023 06:01 PM
Last Post: Aera
by CybercashJan 5, 2022 02:08 PM 6 456 Jan 5, 2022 02:08 PM
Last Post: Cyber "Max" Shaman
by Gee4rceApr 19, 2021 06:47 AM 26 4,056 Apr 19, 2021 06:47 AM
Last Post: theghostofgreen