+- Dark C0d3rs (https://darkcoders.wiki)
+-- Forum: Exploit Log (https://darkcoders.wiki/Forum-Exploit-Log)
+--- Forum: Research Papers/Vulnerability reports (https://darkcoders.wiki/Forum-Research-Papers-Vulnerability-reports)
+--- Thread: HackerOne Disclosed Reports - 2025-12-19 (/Thread-HackerOne-Disclosed-Reports-2025-12-19)
HackerOne disclosed reports - 2025-12-19 - hashXploiter - 12-20-2025
Medium
resolved
resolved
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/
Bug reported by Adrián was disclosed at December 19, 2025, 11:04 am | Cross-site Scripting (XSS) - Reflected
A cross-site scripting (XSS) vulnerability was discovered in You are not allowed to view links. Register or Login to view.. The vulnerability was verified in Chrome 87 and Firefox. The vulnerability allowed execution of arbitrary JavaScript code by injecting it into the website's URL.