<h3 id="heading-vendor-homepage"><strong>Vendor Homepage:</strong></h3>
<p><a target="_blank" href="https://opencollective.com/badaso"><strong>Badaso - Open Collective</strong></a></p>
<h3 id="heading-version"><strong>Version:</strong></h3>
<p>2.9.7</p>
<h3 id="heading-tested-on"><strong>Tested On:</strong></h3>
<p>Marcos, review source code</p>
<h3 id="heading-affected-page"><strong>Affected Page:</strong></h3>
<p><a target="_blank" href="https://badaso-demo.uatech.co.id/dashboard/general/borrowing/add">https://badaso-demo.uatech.co.id/dashboard/general/borrowing/add</a></p>
<p><a target="_blank" href="https://badaso-demo.uatech.co.id/dashboard/general/borrowing/1/edit">https://badaso-demo.uatech.co.id/dashboard/general/borrowing/1/edit</a></p>
<p><a target="_blank" href="https://badaso-demo.uatech.co.id/dashboard/general/members/1/edit">https://badaso-demo.uatech.co.id/dashboard/general/members/1/edit</a></p>
<p><a target="_blank" href="https://badaso-demo.uatech.co.id/dashboard/general/members/add">https://badaso-demo.uatech.co.id/dashboard/general/members/add</a></p>
<h3 id="heading-description"><strong>Description:</strong></h3>
<p>A vulnerability XSS injection was found in Badaso v2.9.7. Cross-site scripting (XSS) is a type of security vulnerability that occurs when a web application includes untrusted data in its output to a web browser. This can allow malicious scripts to be executed by a user's browser, potentially compromising their data and interactions with the website. XSS attacks can have various impacts, including stealing sensitive information, session hijacking, defacement of websites, and more</p>
<h3 id="heading-proof-of-concept"><strong>Proof of Concept:</strong></h3>
<ol>
<li><h4 id="heading-login-and-access-to-function-add-new-member-or-edit-member">Login and Access to function add new member or edit member.</h4>
<p> <img src="https://cdn.hashnode.com/res/hashnode/image/upload/v1693212391278/7a0a7b40-6771-44bf-bc44-a4acf1015a99.png" alt class="image--center mx-auto" /></p>
</li>
<li><h4 id="heading-inject-payload-xss-alert-1-to-the-name-of-the-member-parameter-and-submit-it">Inject payload XSS alert 1 to the name of the member parameter and submit it.</h4>
<pre><code class="lang-plaintext">  "' test &lt;img src="" onerror="alert(2)"&gt;
</code></pre>
<p> <img src="https://cdn.hashnode.com/res/hashnode/image/upload/v1693212527419/992ffb07-1d19-43c9-9530-df127a179061.png" alt class="image--center mx-auto" /></p>
<p> <img src="https://user-images.githubusercontent.com/132877337/252546898-e13c887f-e23c-403e-bcd6-65fc01a41917.png" alt="image" /></p>
</li>
<li><p>Go to Borrowing and add a new Borrowing or edit Borrowing then malicious is executed.  </p>
<p> <img src="https://user-images.githubusercontent.com/132877337/252546940-b4a25e3f-7109-4e3e-99fb-cfb3fac0cf2d.png" alt="image" /></p>
</li>
</ol>


### **Vendor Homepage:**

[**Badaso - Open Collective**](https://opencollective.com/badaso)

### **Version:**

2.9.7

### **Tested On:**

Marcos, review source code

### **Affected Page:**

[https://badaso-demo.uatech.co.id/dashboard/general/borrowing/add](https://badaso-demo.uatech.co.id/dashboard/general/borrowing/add)

[https://badaso-demo.uatech.co.id/dashboard/general/borrowing/1/edit](https://badaso-demo.uatech.co.id/dashboard/general/borrowing/1/edit)

[https://badaso-demo.uatech.co.id/dashboard/general/members/1/edit](https://badaso-demo.uatech.co.id/dashboard/general/members/1/edit)

[https://badaso-demo.uatech.co.id/dashboard/general/members/add](https://badaso-demo.uatech.co.id/dashboard/general/members/add)

### **Description:**

A vulnerability XSS injection was found in Badaso v2.9.7. Cross-site scripting (XSS) is a type of security vulnerability that occurs when a web application includes untrusted data in its output to a web browser. This can allow malicious scripts to be executed by a user's browser, potentially compromising their data and interactions with the website. XSS attacks can have various impacts, including stealing sensitive information, session hijacking, defacement of websites, and more

### **Proof of Concept:**

1. #### Login and Access to function add new member or edit member.
    
    ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1693212391278/7a0a7b40-6771-44bf-bc44-a4acf1015a99.png align="center")
    
2. #### Inject payload XSS alert 1 to the name of the member parameter and submit it.
    
    ```plaintext
     "' test <img src="" onerror="alert(2)">
    ```
    
    ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1693212527419/992ffb07-1d19-43c9-9530-df127a179061.png align="center")
    
    ![image](https://user-images.githubusercontent.com/132877337/252546898-e13c887f-e23c-403e-bcd6-65fc01a41917.png align="left")
    
3. Go to Borrowing and add a new Borrowing or edit Borrowing then malicious is executed.  
    
    ![image](https://user-images.githubusercontent.com/132877337/252546940-b4a25e3f-7109-4e3e-99fb-cfb3fac0cf2d.png align="left")

Tuan Anh's Blog

Tuan Anh's Blog

Badaso version 2.9.7 has an XSS vulnerability in new member

Vendor Homepage:

Version:

Tested On:

Affected Page:

Description:

Proof of Concept:

Inject payload XSS alert 1 to the name of the member parameter and submit it.