http://blog.najdek.me/tags/xss/Recent content in Xss on Mateusz Najdek - blogHugo -- gohugo.ioen-usmateusz@najdek.me (Mateusz Najdek)mateusz@najdek.me (Mateusz Najdek)Sat, 30 May 2026 01:10:22 +0200http://blog.najdek.me/posts/responsible-disclosure-reflected-xss-sso/Sat, 30 May 2026 01:10:22 +0200mateusz@najdek.me (Mateusz Najdek)http://blog.najdek.me/posts/responsible-disclosure-reflected-xss-sso/Disclaimer: The vulnerability described below was discovered during independent security research. It has been responsibly disclosed to the institution’s IT department and was patched immediately. All sensitive details (target name, URLs) have been redacted to maintain confidentiality. Introduction Following up on my October 2025 discovery of a Path Traversal vulnerability in the Student Portal, I continued to keep an eye on the core infrastructure of the institution. Once you realize that legacy components exist in production, it is only logical to examine how the most critical gateways handle data.