An Interesting Case of XSS Caused by File Upload

Hello hackers,

Today, I want to share with you an interesting vulnerability I discovered in a bounty project, an XSS caused by file upload.

The vulnerable feature is located in the target’s feedback section, which allows us to upload image files.

Let’s take a look at the data packets.