CVE-2020-17453

This repository contains a Node.js-based scanner for detecting CVE-2020-17453, a reflected XSS vulnerability in WSO2 Carbon products. The tool sends a crafted payload to the target URL and checks for the presence of the XSS payload in the response.

This repository provides a technical description of a reflected XSS vulnerability in WSO2 Carbon, including a Google dork and a Nuclei scanning template for detection. It does not contain exploit code but offers actionable details for identification.

This repository contains a proof-of-concept for CVE-2020-17453, an XSS vulnerability in WSO2 Management Console through 5.10. The exploit leverages the msgId parameter in the login.jsp page to execute arbitrary JavaScript code.

This repository provides a functional proof-of-concept for CVE-2020-17453, an XSS vulnerability in WSO2 Management Console through 5.10 via the carbon/admin/login.jsp msgId parameter. The PoC includes a direct URL with a crafted payload to trigger the XSS.