Stored XSS in a simulated staff workflow
Lab 12 / 13 · Return to Arena
Welcome to this intentionally vulnerable training application.
Objective: Stored XSS in a simulated staff workflow. Inspect requests and responses with Burp Suite or browser developer tools. Use only the synthetic accounts and data supplied here.
Do not attack the arena portal or any system outside this lab.
Starting point: Inspect the staff review view
Authorized training only · synthetic data · lab 12