?
avatar PhilETaylor
PhilETaylor
12 May 2018

Steps to reproduce the issue

Attempt to set your password in admin to

`"'><img src=xxx:x \x00onerror=javascript:alert(1)> </style &#32;><script &#32; :-(>/**/alert(document.location)/**/</script &#32; :-(

Expected result

My password is set and I can use it to login

Actual result

screen shot 2018-05-12 at 21 18 07

System information (as much as possible)

Joomla! 4.0.0-alpha3 Alpha [ Amani ] 12-May-2018 15:23 GMT

Additional comments

avatar PhilETaylor PhilETaylor - open - 12 May 2018
avatar joomla-cms-bot joomla-cms-bot - change - 12 May 2018
Labels Added: ?
avatar joomla-cms-bot joomla-cms-bot - labeled - 12 May 2018
avatar PhilETaylor
PhilETaylor - comment - 12 May 2018

hmmmm might have had a space in my copy and paste

avatar PhilETaylor PhilETaylor - change - 12 May 2018
Status New Closed
Closed_Date 0000-00-00 00:00:00 2018-05-12 20:19:39
Closed_By PhilETaylor
avatar PhilETaylor PhilETaylor - close - 12 May 2018

Add a Comment

Login with GitHub to post a comment