Counter-Strike 2 XSS Exploit IP Capturer POC

Recently there has been a discovery that allows one to embed a HTML image tag into the vote kick window of panorama in Counter-Strike 2. A PHP script posing as an image can be used to steal the IP addresses of the players connected that load up that image on their game client.
Back to Top