Browse / lemlist

lemlist

See its reports on the map

Attack surface: 91 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to lemlist

• Cross-site Scripting5
• Authentication2
• Misconfiguration2
• Insecure Direct Object Reference1
• Code Execution1
• Server-Side Request Forgery1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Authentication Bypass in Subscription Management EndpointInsecure Direct Object Reference (IDOR) · critical
   68 votes
2. Unauthorized Password Reset Allows Account Takeover Across Tenant BoundariesImproper Authentication - Generic · high
   65 votes
3. Authentication Token Theft via Open Redirect in Callback URL ParameterInsufficiently Protected Credentials · critical
   60 votes
4. stored xss in app.lemlist.comCross-site Scripting (XSS) - Stored · medium
   26 votes
5. Unrestricted File Upload on https://app.lemlist.comUnrestricted Upload of File with Dangerous Type · medium
   24 votes
6. SSRF in img.lemlist.com that leads to Localhost Port ScanningServer-Side Request Forgery (SSRF) · medium
   23 votes
7. [app.lemlist.com] Improper handling of payment lead to bypass paymentBusiness Logic Errors · high
   18 votes
8. Stored XSS at [ █████ ] in " LINKEDIN URL" Field.Cross-site Scripting (XSS) - Stored · low
   18 votes
9. Security misconfiguration Misconfiguration · high
   15 votes
10. Clickjacking at app.lemlist.comUI Redressing (Clickjacking) · high
    13 votes
11. stored xss via Campaign Name.Cross-site Scripting (XSS) - Stored · medium
    11 votes
12. CVE-2019-19935 - DOM based XSS in the froala editorCross-site Scripting (XSS) - DOM · low
    10 votes
13. Stored XSS in app.lemlist.comCross-site Scripting (XSS) - Stored · low
    3 votes