Vue JS Reflected XSS

Hi guys, in this writeup I will be showing you how I was able to get a reflected XSS on a VueJS application. I found a vulnerable param named ‘?email=’ which was filtering all the tags. So I referred portswigger’s XSS cheatsheet to get hints for the payloads. The first thing you should do is check the technologies used in that application. So in my case it was an application which was based on Vue

[efcl]

VueのTemplate InjectionでのXSS Payload集