[Mummified6837]

https://www.fnb.co.za/
https://security.snyk.io/package/npm/jquery/3.3.1

[DredgenSun]

Could you explain what you're sharing here?

[Zix]

Could you explain what you're sharing here?

If I had to guess, this African Bank is using a vulnerable version of jQuery. The vulnerability is XSS, which allows the execution of JavaScript on the client side. This is most likely a reflective XSS vulnerability, meaning that if you craft a link containing malicious JavaScript code, you could potentially perform actions on behalf of the user who clicks the link. Additionally, you might obtain the victim's IP address by having the JavaScript call back to your server upon execution.
 
 
~~ Zixshore ~~

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Self-Ban | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you wish to be unbanned in the future.

[DredgenSun]

Could you explain what you're sharing here?

If I had to guess, this African Bank is using a vulnerable version of jQuery. The vulnerability is XSS, which allows the execution of JavaScript on the client side. This is most likely a reflective XSS vulnerability, meaning that if you craft a link containing malicious JavaScript code, you could potentially perform actions on behalf of the user who clicks the link. Additionally, you might obtain the victim's IP address by having the JavaScript call back to your server upon execution.
 
 
~~ Zixshore ~~

Thank you for the explanation kind sir, it's most appreciated