Browse / Insightly

Insightly

See its reports on the map

What gets reported to Insightly

• Cross-site Scripting2
• Access Control1
• Authentication1
• Cross-Site Request Forgery1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Email verification bypass via request to endpoint "accounts.insightly.com/signup/provisionuser"Improper Authorization · critical
   148 votes
2. Stored XSS via LINK Name.Cross-site Scripting (XSS) - Stored · high
   107 votes
3. Stored XSS in Email Notifcation Cross-site Scripting (XSS) - Stored · medium
   101 votes
4. returnUrl= allow attacker to redirect users to the another phising website and takeover credientialsImproper Authentication - Generic · medium
   94 votes
5. CSRF vulnerability allows disabling Gmail contacts link for user referralsCross-Site Request Forgery (CSRF) · medium
   70 votes