pentester.land· Jan 22, 2024· by Pierre Martin (@_Worty), Romain Brun (@SpawnZii)

Multiple Vulnerabilities On GestSup 3.2.44

Target Program: GetSup

🎯 Vulnerability: Cross-Site Scripting (XSS)

💡 Defense Fix: Enforce Context-Aware Output Encoding, strict Content-Security-Policy (CSP), and HttpOnly cookie flags.

#Account takeover#SQL injection#Stored XSS#Security code review