access-key-attribute

1 article
sort: new top best
clear filter
0 3/10

Researcher discovered a reflected XSS vulnerability in Oracle NetSuite's search functionality that could be triggered via accesskey attribute combined with onclick handler in URL parameters, requiring victim interaction (Alt+Shift+X keyboard shortcut).

Oracle NetSuite Circle Ninja
medium.com · devanshbatham/Awesome-Bugbounty-Writeups · 19 hours ago · details