[SECURITY] /fileupload and XSS

Need help
1

I have two problems regarding the security of the application:

  1. How do I disable the ability to upload files via URL: exampledomain.com/fileupload to my app? I haven’t users in my application.
  2. A critical Cross-Site Scripting (XSS) vulnerability in URL: Loading.... An attacker can inject and execute malicious JavaScript code on the user’s browser through this vulnerability, potentially compromising sensitive information on the main domain. How can I solve this?
2

This topic was automatically closed after 70 days. New replies are no longer allowed.