Webpagetest project Vulnerabilities

An attacker can inject and run malicious scripts in a user's browser when they visit a specific page on the webpagetest site, potentially stealing sensitive information or manipulating the user's session. This occurs because the site does not properly filter user input, allowing harmful code to be executed if a user is tricked into clicking a specially crafted link.

An attacker can inject and run malicious scripts in a user's browser when they visit a specific page on a vulnerable webpagetest site. This happens because the site doesn't properly filter user input for a color setting, allowing the attacker to manipulate the page's content if they can trick someone into visiting a crafted link.

An attacker can inject malicious HTML and script code into a web page, which could then run in the browser of anyone visiting that page. This vulnerability occurs because the application does not properly filter the data provided by users, allowing the attacker to exploit it without needing special access.