Published onNovember 23, 2024GlacierCTF - SkiDatawebWebwebxssglacierctfcve-2024-34064NamervrThe challenge involved crafting an XSS payload to extract a flag from an HTML tag, leveraging a vulnerability in the processing of uploaded .xlsx files and exploiting xmlattr vulnerability in Jinja2.