testert1ng
diff --git a/Diff for: ‎micro-cms_v1/flag2/README.md
+1-1 b/Diff for: ‎micro-cms_v1/flag2/README.md
+1-1
diff --git a/Diff for: ‎micro-cms_v1/flag3/README.md
+27 b/Diff for: ‎micro-cms_v1/flag3/README.md
+27
diff --git a/Diff for: ‎micro-cms_v1/flag3/imgs/edit.jpg
32.3 KB b/Diff for: ‎micro-cms_v1/flag3/imgs/edit.jpg
32.3 KB
diff --git a/Diff for: ‎micro-cms_v1/flag3/imgs/flag.jpg
60.6 KB b/Diff for: ‎micro-cms_v1/flag3/imgs/flag.jpg
60.6 KB
@@ -10,7 +10,7 @@
 
 ## 0x02 Edit Page 1
 
-```javascript
+```html
 <script>alert`xss`</script>
 ```
 
 
@@ -0,0 +1,27 @@
+# Micro-CMS v1 - FLAG3
+
+## 0x00 Index
+
+![](../flag0/imgs/index.jpg)
+
+## 0x01 Page 2
+
+![](../flag0/imgs/2.jpg)
+
+## 0x02 Edit Page 2
+
+```html
+<button onclick=alert(1)>Some button</button>
+```
+
+![](./imgs/edit.jpg)
+
+Save and nothing happened.
+
+## 0x03 FLAG
+
+But the button may trigger an js event. 
+
+Go check the html and get the FLAG.
+
+![](./imgs/flag.jpg)