pentester.land· Aug 8, 2024· by Supakiad S. (@Supakiad_Mee)💰 Bounty: 3,000

Persistent XSS on Microsoft Bing.com by poisoning Bingbot indexing

Open Original Article ↗
Target Program: Microsoft (Bing)
🎯 Vulnerability: Cross-Site Scripting (XSS)
💡 Defense Fix: Enforce Context-Aware Output Encoding, strict Content-Security-Policy (CSP), and HttpOnly cookie flags.
#Stored XSS