PAYATU

Vaibhav Rajput

Ex-Bandit
Former Associate Security Consultant at Payatu, working on exploit development and security research. Has authored 2 blogs, 1 published CVE for Payatu.
PAYATU

Vaibhav Rajput

Ex-Bandit
Former Associate Security Consultant at Payatu, working on exploit development and security research. Has authored 2 blogs, 1 published CVE for Payatu.
Former Associate Security Consultant at Payatu, working on exploit development and security research. Has authored 2 blogs, 1 published CVE for Payatu.
PAYATU

Vaibhav Rajput

Ex-Bandit

CVEs published

Vulnerabilities discovered and responsibly disclosed. Each links to the Payatu advisory.

FluentForms <= 4.3.22 Stored XSS via Custom HTML fields

FluentForms <= 4.3.22 Stored XSS via Custom HTML fields The plugin does not properly sanitize and escape the srcdoc attribute in iframes in it's custom HTML field type, allowing a logged in user with
Web / CMS
Cross-Site Scripting (XSS)
Medium
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Talks & appearances

Conferences, podcasts and workshops.
No items found.

Articles by  

Vaibhav Rajput

Application Security
Exploring ways to exploit SSTI in Go Frameworks
January 12, 2024
10 min
Application Security
Engineers
Researchers
For Security Leaders
Guides & tutorials
Web Security Assessment
Web & API
Understanding the Difference Between SameSite and SameOrigin
July 17, 2023
6 min
Web Security Assessment
Web & API
Engineers
Researchers
Guides & tutorials

The Bandits

Conferences, podcasts and workshops.
Bandits
All

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
Dark scene with vertical thin orange lines resembling distant illuminated bars or streaks against a black background and a faint horizontal red glow near the bottom.

Impressed by the work? Point it at your systems.

Bring the research depth behind these advisories to your own product, app or infrastructure.

Talk to an expert
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
Black downward arrow on a white background.Black downward arrow on a white background.
Explore our research
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
This is the default text value
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.