A simple file upload bypass causing XSS attack

Hello hackers,

Today I will continue to share about XSS vulnerabilities caused by file uploads. It’s not difficult at all; once you see it, you’ll understand. Let’s get started.

Content-Disposition: form-data; name=”file”; filename=”120.png”

—>

Content-Disposition: form-data; name=”file”; filename=”120.html.png”