✍️ Description

Stored xss using vue js

🕵️‍♂️ Proof of Concept

1. First goto your account and visit https://app.budgethq.com/transactions and create a transaction .
During creation put bellow xss payload in Description field and save it .
Now see xss is executed

Payload ---> {{ constructor.constructor("alert('xs222s')")() }}

#VIDEO POC

https://drive.google.com/file/d/1fkPqCdEXGaOLryLDRe0T4mPTv3yVUhfJ/view?usp=sharing

💥 Impact

Stored xss allow to executed arbitary javacscript in vicitm account