add one site

xanhacks · Feb 22, 2024 · 4c6c6f8 · 4c6c6f8
1 parent d91e742
commit 4c6c6f8
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/content/docs/getting-started/vulnerability-reports.md b/content/docs/getting-started/vulnerability-reports.md
@@ -34,6 +34,7 @@ toc: true
 - [GCP - XSS in POST Request & Markdown](https://obmiblog.blogspot.com/2022/12/gcp-2022-few-bugs-in-google-cloud-shell.html) - XSS in POST request using CSRF attack. Using [NEL](https://web.dev/network-error-logging/) to leak session token.
 - [html-janitor - Bypassing sanitization using DOM clobbering](https://hackerone.com/reports/308158)
 - [Microsoft Teams - XSS using a CSS class attribute inside AngularJS](https://speakerdeck.com/masatokinugawa/how-i-hacked-microsoft-teams-and-got-150000-dollars-in-pwn2own)
+- [Ghost CMS - XSS in SVG profile picture](https://rhinosecuritylabs.com/research/cve-2024-23724-ghost-cms-stored-xss/)
 
 ## Client-Side