Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      CodeSOD: A Unique Way to Primary Key

      July 22, 2025

      BrowserStack launches Figma plugin for detecting accessibility issues in design phase

      July 22, 2025

      Parasoft brings agentic AI to service virtualization in latest release

      July 22, 2025

      Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

      July 21, 2025

      The best CRM software with email marketing in 2025: Expert tested and reviewed

      July 22, 2025

      This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

      July 22, 2025

      I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

      July 22, 2025

      8 ways I quickly leveled up my Linux skills – and you can too

      July 22, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      The Intersection of Agile and Accessibility – A Series on Designing for Everyone

      July 22, 2025
      Recent

      The Intersection of Agile and Accessibility – A Series on Designing for Everyone

      July 22, 2025

      Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

      July 22, 2025

      Execute Ping Commands and Get Back Structured Data in PHP

      July 22, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

      July 22, 2025
      Recent

      A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

      July 22, 2025

      “I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

      July 22, 2025

      Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

      July 22, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2025-40616 – Bookgy Reflected XSS

    CVE-2025-40616 – Bookgy Reflected XSS

    April 29, 2025

    CVE ID : CVE-2025-40616

    Published : April 29, 2025, 4:15 p.m. | 31 minutes ago

    Description : Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScript code in the victim’s browser by sending a malicious URL through the “IDRESERVA” parameter in /bkg_imprimir_comprobante.php.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2025-40617 – Bookgy SQL Injection Vulnerability
    Next Article CVE-2025-40615 – Bookgy Reflected Cross-Site Scripting (XSS)

    Related Posts

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

    July 22, 2025
    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-7393 – Drupal Mail Login Authentication Bypass

    July 22, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    CVE-2025-45582 – Apache GNU Tar Directory Traversal Overwrite Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    Samsung MagicINFO 9 Server RCE flaw now exploited in attacks

    Security

    Building cost-effective RAG applications with Amazon Bedrock Knowledge Bases and Amazon S3 Vectors

    Machine Learning

    Critical RCE in MCP Inspector Exposes AI Devs to Web-Based Exploits (CVE-2025-49596)

    Security

    Highlights

    Development

    Behavior-Driven Development (BDD) with Selenium and Cucumber

    June 19, 2025

    Behavior-Driven Development (BDD) is a methodology that bridges the gap between business and technical teams by emphasizing collaboration. It uses plain language to define application behavior, making it easier for non-technical stakeholders to contribute to the development process. Selenium and Cucumber are widely used together in BDD to automate web application testing.
    This blog provides a detailed guide to implementing BDD using Selenium and Cucumber, including coding examples to help you get started.

    What is BDD?
    BDD focuses on the behavior of an application from the end user’s perspective. It uses scenarios written in Gherkin, a domain-specific language with a simple syntax:

    Given: Precondition or context.

    When: Action or event.

    Then: Outcome or result.

    Example:Feature: Login Functionality
    Scenario: Valid user logs in successfully
    Given the user is on the login page
    When the user enters valid credentials
    Then the user is redirected to the dashboard

    Tools Used

    Selenium: Automates web browsers to test web applications.

    Cucumber: Enables writing tests in plain English (Gherkin syntax).

    Java: Programming language for writing test automation scripts.

    JUnit/TestNG: Test framework to execute Cucumber tests.

    Setting Up Your Project

    Create a Maven Project:

    Add dependencies in pom.xml:<dependencies>
    <dependency>
    <groupId>io.cucumber</groupId>
    <artifactId>cucumber-java</artifactId>
    <version>7.11.0</version>
    </dependency>
    <dependency>
    <groupId>io.cucumber</groupId>
    <artifactId>cucumber-junit</artifactId>
    <version>7.11.0</version>
    </dependency>
    <dependency>
    <groupId>org.seleniumhq.selenium</groupId>
    <artifactId>selenium-java</artifactId>
    <version>4.10.0</version>
    </dependency>
    </dependencies>

    Directory Structure:

    src/test/java: For step definitions.

    src/test/resources: For feature files.

    Writing a Feature File
    Save this file as login.feature in src/test/resources/features:Feature: Login Functionality

    Scenario: Valid user logs in successfully
    Given the user is on the login page
    When the user enters valid credentials
    Then the user is redirected to the dashboard

    Scenario: Invalid user cannot log in
    Given the user is on the login page
    When the user enters invalid credentials
    Then an error message is displayed

    Creating Step Definitions
    Create a Java file LoginSteps.java in src/test/java/stepdefinitions:package stepdefinitions;

    import org.openqa.selenium.By;
    import org.openqa.selenium.WebDriver;
    import org.openqa.selenium.WebElement;
    import org.openqa.selenium.chrome.ChromeDriver;
    import io.cucumber.java.en.*;

    public class LoginSteps {
    WebDriver driver;

    @Given(“the user is on the login page”)
    public void userIsOnLoginPage() {
    System.setProperty(“webdriver.chrome.driver”, “path_to_chromedriver”);
    driver = new ChromeDriver();
    driver.get(“https://example.com/login”);
    }

    @When(“the user enters valid credentials”)
    public void userEntersValidCredentials() {
    WebElement username = driver.findElement(By.id(“username”));
    WebElement password = driver.findElement(By.id(“password”));
    WebElement loginButton = driver.findElement(By.id(“login”));

    username.sendKeys(“validUser”);
    password.sendKeys(“validPassword”);
    loginButton.click();
    }

    @Then(“the user is redirected to the dashboard”)
    public void userIsRedirectedToDashboard() {
    String expectedUrl = “https://example.com/dashboard”;
    assert driver.getCurrentUrl().equals(expectedUrl);
    driver.quit();
    }

    @When(“the user enters invalid credentials”)
    public void userEntersInvalidCredentials() {
    WebElement username = driver.findElement(By.id(“username”));
    WebElement password = driver.findElement(By.id(“password”));
    WebElement loginButton = driver.findElement(By.id(“login”));

    username.sendKeys(“invalidUser”);
    password.sendKeys(“invalidPassword”);
    loginButton.click();
    }

    @Then(“an error message is displayed”)
    public void errorMessageIsDisplayed() {
    WebElement error = driver.findElement(By.id(“error”));
    assert error.isDisplayed();
    driver.quit();
    }
    }

    Configuring the Runner Class
    Create a Java file TestRunner.java in src/test/java/runners:package runners;

    import org.junit.runner.RunWith;
    import io.cucumber.junit.Cucumber;
    import io.cucumber.junit.CucumberOptions;

    @RunWith(Cucumber.class)
    @CucumberOptions(
    features = “src/test/resources/features”,
    glue = “stepdefinitions”,
    plugin = {“pretty”, “html:target/cucumber-reports”},
    monochrome = true
    )
    public class TestRunner {
    }

    Running Your Tests

    Open a terminal.

    Navigate to your project directory.

    Run the following command:mvn test
    This will execute all scenarios defined in the login.feature file.

    Best Practices for BDD with Selenium and Cucumber

    Keep Scenarios Simple: Use concise and descriptive steps in Gherkin.

    Reuse Step Definitions: Avoid duplicating code by reusing steps where possible.

    Parameterize Steps: Handle multiple inputs by parameterizing your Gherkin steps.

    Organize Files: Maintain a clear structure for features, steps, and configurations.

    Continuous Integration: Integrate Cucumber tests with CI/CD pipelines for automated execution.

    Conclusion
    BDD with Selenium and Cucumber is a powerful combination for creating readable, maintainable, and effective test automation suites. By leveraging this approach, teams can foster collaboration, improve test coverage, and ensure high-quality software delivery. Start implementing BDD in your projects today and experience its benefits firsthand!

    Keywords: BDD, Selenium, Cucumber, Automation Testing, Behavior-Driven Development, Gherkin, Step Definitions, Test Automation Framework.

    Report: Security is no longer the top challenge in cloud native environments

    April 1, 2025

    New TeamViewer Vulnerability Puts Windows Systems at Risk of Privilege Escalation

    June 25, 2025

    VideoDubber’s YouTube Channel Finder

    May 22, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.