This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
XBOW
xbow.com
did:plc:gclnfv6x6e2fu4w4qp53m2xx
XBOW found a stored XSS vulnerability (CVE-2024-52597) in the migration functionality of 2FAuth by crafting a malicious SVG file with a Javascript payload! Our latest blog post gives the full details: https://xbow.com/blog/xbow-2fauth-xss/
2024-12-13T18:11:29.658Z