SXSS-04: Stored XSS With Filtering — VulnXSS Training Lab

SXSS-04 Stored XSS With Filtering Intermediate Unsolved ShopNest Product Reviews

Fictional Application

ShopNest Product Reviews

Consumer Electronics & Gadget Marketplace

ShopNest enables verified buyers to write reviews for electronics. To mitigate XSS, the backend checks for `<script>` and `onerror` in reviews and strips them. Evaluate whether this blacklist adequately secures the review section.

🎯 Assessment Objective

Bypass the review filter and trigger persistent JavaScript execution on the product page.

Educational Guidance: Treat this lab like an authorized penetration test. Analyze user-controlled parameters, review browser source code and developer tools, and discover how input is handled.

🎧 ShopNest

Product Details Write a Review 🛒 Cart (1)

← Back to Product

Shopping Cart (1 Item)

Price

🎧

AeroSound Pro Wireless ANC Headphones

✓ In Stock • Free 2-Day Prime Delivery

Color: Midnight Matte Black | Edition: Pro Active Noise Cancelling

Qty: 1 Update Save for later

$249.00

← Back to Product Details

Subtotal (1 item): $249.00

Shopping Cart (1 Item)

AeroSound Pro Wireless ANC Headphones

XSS Successfully Demonstrated!