Vulnhub

Bypassing WAF: Reflected XSS in E-Commerce Search Parameter

A detailed walkthrough on discovering a Reflected Cross-Site Scripting (XSS) vulnerability that bypassed an initial WAF filter using clever encoding.