Stored XSS in Comments Section

[arafatansari]

A Cross Site Scripting vulnerabilty exists in Miniblog.Core Post Comments.

Step to exploit:

• Navigate to https://miniblogcore.azurewebsites.net/blog/{{blogname}}/#comments
• Insert XSS payload <img src=1 onerror=alert('XSS')> in the "comments" section and fill the rest of the details and click on Post Comments.
• Refresh.