Cross-Site Scripting (XSS) in "/posts"

[tuando243]

A Cross Site Scripting vulnerabilty exists in Miniblog.Core via the Excerpt field in "/posts"

Step to exploit:

1. Login as admin.
2. Navigate to https://miniblogcore.azurewebsites.net/blog/edit.
3. Insert XSS payload <img src=1 onerror=alert('XSS')> in the "Excerpt" field and click on Save.
4. Go to Home page.