Recently, security researcher Matthew Bryant discovered a blind cross-site scripting (BXSS) vulnerability in GoDaddy’s customer support portal —that is the portal accessible only to GoDaddy customer service representatives, not customers. New post: Poisoning the Well – Compromising GoDaddy Customer Support With Blind XSS – https://t.co/uEJWPU8Y4O — mandatory/Matthew Bryant (@IAmMandatory) May 8, 2
![How to detect the GoDaddy Blind XSS vulnerability](https://cdn-ak-scissors.b.st-hatena.com/image/square/3ed654093b79a5ef8fcf9ad21f123ef0309a5178/height=288;version=1;width=512/https%3A%2F%2Fcdn.acunetix.com%2Fwp_content%2Fuploads%2F2016%2F05%2FGoDaddy-BXSS.png)