Description

The application has a reflected xss vulnerability in the url parameter type.

Proof of Concept

// PoC.js
var payload = "><script>alert(document.cookie)</script>

Impact

If an attacker can control a script that is executed in the victim's browser, then they can typically fully compromise that user. Amongst other things, the attacker can: Perform any action within the application that the user can perform.