I have an application that executes under Tomcat 7, developed with Struts (Java Web Framework). My application contains a security vulnerability (XSS Cross-site scripting).
What kind of XSS vulnerability is it ?
- Persistent (or stored)
How is it introduced and what is the context ?
- Enter value in the textfield
What Java frameworks are you using ?
- Struts 1.3
XSS is performed by the HTML code, which was introduced by a third party and is performed by the application. In the following example shows the vulnerability:
<html:text name="grupo" property="description" size="50" alt="Description"/>
After submit the form: