Site icon API Security Blog

XVIDEOS: Error Page Content Spoofing or Text Injection

image
The content spoofing vulnerability on multi.xnxx.com allowed arbitrary text to be injected into error pages. The injected content was reflected back to users under the trusted domain, which could have been exploited for social engineering…Read More

Exit mobile version