Capital One Vulnerabilitie Latest Script XSS Attack

[battsTheHackerrr]

Cross-site scripting (XSS) vulnerability found in script tag: <script>
// OneTag queue - https://onetagdoc.cloud.capitalone.com/installation#queue
(function (w) {
if (w.oneTag) return;
w.oneTag = {};
w.oneTagEventQueue = [];
w.oneTag.track = function (eventType, dataObject) {
w.oneTagEventQueue.push({
eventType: eventType,
dataObject: dataObject,
});
};
})(window);
</script>


hit my discord for more discord

 

[CarlosEdumb]

Thanks man lets see

 

[Jamesmuh]

Aright bet!

 

[GabriVors]

You need to update 2025

 

[AlanncacH]

ok got it 🙂

 

[KIMCHONG]

ok