XSS Reflected
Last updated
Last updated
Go to login page form
and log in using login bypass or inserting password.
Go to a page vulnerable to XSS reflected like as:
injecting the javascript payload: <script>alert(document.cookie)</script> we can execute directly the command and obtain a reflected session cookie id of current account (admin):
