Acronis · Report #1028820
Blind Stored XSS in https://partners.acronis.com/admin which lead to sensitive information/PII leakage
Validstatus
highseverity
$150bounty
33upvotes
29 Jul 2021disclosed
Summary
Blind XSS was possible on partners.acronis.com (Tier 3) via several contact form fields. We have seen no signs of the exploitation of this vulnerability.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.